Dimitri is an accountant with PwCo. The firm maintains a strict policy of requiring all employees to change their passwords every sixty days. In early March 2022, Dimitri received an e-mail claiming that there had been an error in updating his password. The e-mail contained a link to a website with instructions for re-updating his password. Something about the e-mail made Dimitri suspicious, so he called PwCo's information technology department and found that the e-mail was fictitious.

Required:

Suggest two other general/application controls for each the firm could have, to prevent and detect this fraud.