Physically locking up assets and electronically securing access to other assets and information is required by the internal control principle of ______? 1) Segregation of duties 2) Authorization and approval 3) Physical controls 4) Information processing controls