The assessment of internal controls and risks in IT systems are part of the works of an IT auditor, study the scenario and answer the questions accordingly: The Green Macau Corporation (GMC), a small business with more than 60 employees, sells environmental consulting services to other companies (especially hotels, resorts and restaurants) around the Pearl River Delta Region. It has 20 consultants who are required to frequently travel the regional areas, assisting its clients with environmental compliance. To conduct business, the company must maintain a website so that potential customers can learn of its services and contact its consultants. The company maintains an internal network with an extensive database of environmental regulations and environmental data. Each of its consultants also carries a laptop computer provided by the company; the company has also installed a wireless network so that when the consultants are in the office they can easily connect to the company's network.
Consultants may also need to visit off-site clients frequently, but while consulting with clients off-site, they must use their laptops to access the company database to look up environmental regulations and data.

a) List briefly describe the authentication and hacking controls that you think Green Macau Corporation should have in place. [10%]
b) Explain how each control that you list in (a) can help to prevent the IT related risks for Green Macau Corporation. [10%]
c) Are there any general controls that you think would not be too cost-beneficial for Green Macau Corporation?