“Monitoring the User Domain” 

It is common knowledge that employees are a necessary part of any business. Identify three best practices in the user domain and suggest the control type(s) (technical or manual) that are best suited to monitor each best practice.
Determine the impact that factors such as physical security, device type, and open source software might have on the choices that are made.