Which of the following scenarios would represent the greatest threat to the authority of the internal audit activity (IAA)?

Which two of the following are preventive controls in a check disbursement process?

1. Daily reconciliation of the bank account used for check disbursements and prompt follow-up of un-reconciled items.

2. Segregation of the following duties: establishing new vendors, approving checks, and reconciling the bank account.

3. An activity report detailing who accesses the check disbursement system and the nature of any action taken in the system.

4. Evidence of strong access controls ensuring that authorized individuals have access only to the functions related to their responsibilities.

A computer system automatically locks a user's account after three unsuccessful attempts to log on.

Which type of control does this scenario represent?