An Error of commission or omission in an information system (IS) that may allow protection mechanisms to be bypassed.