___________ is a controllable variable and how much control is necessary depends on the degree...

Capability refers to the potential of a person to commit dishonest acts, and it is considered a controllable variable in security management. The degree of control needed over a person ' s capability depends on their level of honesty. In environments with higher risks of internal threats, security systems, supervision, and checks may be increased to mitigate the risks associated with those who have both opportunity and capability.