18 (a) Control activities
– Segregation of duties 1
– Information processing 1
– Authorisation 1
– Physical controls 1
– Performance reviews 1
–––
Restricted to 4
–––