Control and Risk are the two parts of the coin. Risk management is the process of identifying vulnerabilities and threats to operating system resources to achieving business objectives and deciding what counter measures to take in reducing the lowest level of risk. The increased use of computer & communications system by IT industries has increased the risk of theft of proprietary information. Cryptographic control (Encryption) is a primary method of protecting system resources. Automated control is probably the most important aspect of communications security and becoming increasingly important as basic building block for computer security. Automated Control is inversely proportional to the risk & mean while control is directly proportional to the quality of standard (S).