“Monitoring the User Domain” 

• It is common knowledge that employees are a necessary part of any business. Identify three best practices in the user domain and suggest the control type(s) (technical or manual) that are best suited to monitor each best practice.
• Determine the impact that factors such as physical security, device type, and open source software might have on the choices that are made.