18

Which of the following is not a useful control procedure to minimise risks associated with access to system outputs?

	a.	Requiring employees to log out of applications when leaving their desk.
	b.	Restricting access to rooms with printers.
	c.	Allowing visitors to move through the building with limited supervision.
	d.	Encrypting reports prior to sending them electronically.