For each of the issues described below, explain the organisational policies or procedures that you recommend to prevent each activity from taking place. Also classify each control you recommend as whether it is a preventive, detective or a corrective control.

a. A vendor employee forwards an invoice for $476 of packing materials to a large company that manufactures fragile components, but without sending the packing materials. The company is accustomed to receiving invoices from the vendor and makes the payment, which is intercepted by the same vendor employee for their own gain.

b. A hacker is able to gain access to a companys computer system by guessing the password of his neighbour Gertrude, the name of his neighbours dog.