(a) Locked doors / Biometrics / CCTV / Security Guards (2)
(b) Restricting what users can do/see based on role (1). Limits access to sensitive data (1). Prevents accidental deletion (1).
(a) Length (8+ chars), Mixed case, Symbols/Numbers, No personal info.
(b) Uses physical traits (fingerprint) (1). Cannot be forgotten/lost (1).
(c) Account Lockout (after X failed attempts) (1) stops the trial-and-error process (1).
(a) Scrambles data (1). Makes it unreadable without the key (1).
(b) Plain text (1). Cipher text (1).
(b) Cable locks / Kensington locks / Bolting to desk (2). (Do not allow 'Lock door' - question asks about hardware theft in public area).
(a) After password, code sent to second device (1). Hacker cannot login without physical device (1).
(b) Privacy screen / Winged guards / Screen positioning.
Indicative Content: