Which preventive, detective, and/or corrective controls would best mitigate the following threats? 

a. an employee’s laptop was stolen at the airport. the laptop contained personal information about the company’s customers that could potentially be used to commit identity theft.

b. a salesperson successfully logged into the payroll system by guessing the payroll supervisor’s password.

c. a criminal remotely accessed a sensitive database using the authentication credentials (user id and strong password) of an it manager. at the time the attack occurred, the it manager was logged into the system at his workstation at company headquarters.