colin would like to implement a security control in his accounting department that is specifically designed to detect cases of fraud that are able to occur despite the presence of other security controls. which one of the following controls is best suited to meet colin's needs?