1.What is the single best internal control procedure that can be used, and explain it?
2.Why do we say that it is not a good idea to have one person compete all transactions from start to finish
3.Which asset is the most vulnerable and why
4.What is a blind copy, what department used it and why?

Proper authorisation procedures
Use your imagination, but invitation to fraud tops the list
I'm going to leave the rest up to you