You are the director of IT audit for a small but growing fintech organization. The new VP of operations is concerned that risks are not being managed appropriately within the department. He provides you with the current alignment between activities and risks and asks you to review them and ensure that items are aligned correctly. For each of the following control activities, select the type of risk it mitigates.

Risks:

Inadequate segregation of duties

Unauthorized physical access

Unauthorized logical access

Control activities:

Type of Risk

Only the warehouse manager can unlock the main door.

Software programmers cannot write the code and implement that code within the production environment.

All guests must check in with security personnel at the front desk.