Which of the following statements is TRUE regarding security?

The information security goals are confidentiality, utility, authenticity and availability

Availability is not an information security goal

Security training is very important; rarely are security incidents caused by properly trained users

Access controls always include authentication and authorization