Which of the following is NOT true about cyber-security?
1.Data must be encrypted in a manner that it cannot be decrypted until after the information is of no value
2.Security means confidentiality
3.IT security is part of physical security
4.Security should be risk based- cost effective