Control activities:

Type of Risk

Only the warehouse manager can unlock the main door.

Software programmers cannot write the code and implement that code within the production environment.

All guests must check in with security personnel at the front desk.

Unauthorized physical access

Tiered access is based on job function.

Unauthorized logical access

Only employees with Level $4$ badges may enter the data center.

Unauthorized physical access

The same personnel should not prepare bank deposits and verify cash receipts.

Qequate segregation of duties

Accounts payable clerks may not process payments for invoices.

Users must authenticate to join the wireless network.

All passwords must have at least $10$ characters and must be changed every $60$ days.