Which of the following would BEST justify spending for a compensating control?