4. Read the following scenario, then: Identify three risks within the scenario, based on the facts provided; Propose one control to address each risk. Please use the names for controls provided in Chapter 9 of the Coursepack on PP. 140-142. For each control you propose, also identify: o Its function (preventative, detective, or corrective); o Its type (physical control, IT general control, or IT application control); o For IT application controls, whether it is an input, processing, or output control; o For IT input controls, the specific type of input control (15 marks). United Artist Productions stages plays each year, paying for actor salaries and production costs through ticket sales. Props and equipment are stored in the back of the theatre, in locked rooms accessible only by supervisors. Theatre tickets and ticket payments are handled by the front office, who sell tickets both via the phone and to people who arrive at the ticket office. Ticket prices are entered into the information system by the marketing person, with different prices depending on seat quality. However, front office staff can override ticket prices in the computer system for last minute ticket sales to ensure seats are filled. At end of day, the front office staff count cash and prepare cash and deposit slips for the accountant to take to the bank the next day. The ticket sales information system can only be accessed with login IDs and passwords, with each employee having their own credentials. For each ticket sale, the name and phone number of the ticket buyer are recorded, along with payment details. Sometimes the buyer's name is accidentally put in the phone number field, or digits are left off such as the area code. Some ticket buyers are also discount card holders; in which case they must provide their discount card number. Sometimes they accidentally provide an incorrect number which is accepted by the front office staff, creating problems for later verification by the accountant. Ticket stubs are collected at the door by the ushers and compared later to the count of total tickets sold. The accountant has generally felt that as long as the counts match, the amount of money deposited is likely correct. While the tickets are pre-numbered, the amount paid is not indicated on the ticket.