Choice "B" is correct. Statement I is the only correct statement. Access controls limit access to program documentation, data files, programs, and computer hardware. Statement II is incorrect. Passwords should not consist of words that can be found in a common dictionary and should be of a reasonable length because longer passwords are more difficult to crack than short ones. Statement III is incorrect. A backdoor is a means of access to a program or system that bypasses normal security mechanisms. Backdoors should be eliminated.