Which preventive, detective, and/or corrective controls would best mitigate the following threats?

A-The company hired a new applicant who provided fictitious and exaggerated information on his job application and resume. The newly hired employee who was unqualified for the job, engaged in embezzlement by creating fictitious invoices, and was later found to have lied and misrepresented himself in his application.

B-An employee who is permitted to enter only the payroll data, was able to access the promotion list and delete it.

C-An employee inserted a USB drive on his laptop which he found on his office desk. The USB infected his laptop with a virus.