The risk of change control security