During the year, Vilarium (Pty) Ltd lost two laptops together with three hard drives that had back-up data due to theft. There were reports of two men having been seen suspiciously loitering around the IT premises a day before the break-in. The company's operations were shut down for two weeks since most of the data could not be recovered.

Briefly describe the controls that Vilarium (Pty) Ltd should have implemented in order to limit the losses due to the theft.

Your answer should be under the following headings:

1. Physical Access Controls. 
2. Controls over business continuity.