A common practice in smaller companies trying to improve internal controls over their automated systems includes all except which of the following?
1) Allowing employees to use available workstations
2) Implementing regular system audits
3) Enforcing strong password policies
4) Providing training on system security measures