Many of the risks that small businesses face are a bit different from larger companies due to limitations surrounding resources, time, money, etc. Considering these factors, which of the following control activity considerations would managers of a small business prefer?

Make use of logical access controls with privileges assigned to each user in the system.

Hire more employees to enforce proper se jation of duties.

Establish a secure company network on which employees are required to save any company data.

Require employees to use strong usernames and passwords. Institute policies$/$procedures mandating routine password changes $($ex: every $6$ months, $1$ year, etc.$).$

Focus on segregation of duties where it is financially feasible, and mediate risks with compensating controls like manager supervision.

Purchase third$-$party vendor software $($like Square, QuickBooks, Microsoft Access, etc.$)$ or use SaaS.

Consider using complex controls to mitigate several risks at once.