Which of the following are examples of operational controls that would be appropriate to implement in an environment where financial processing activities occur? (Select two.)

Key escrow is a method used to store cryptographic keys securely, allowing authorized parties to access them when necessary. While it is important for data security, it does not directly relate to operational controls in financial processing activities, which focus on managing human actions and preventing fraudulent behavior.

Tokenization refers to the process of replacing sensitive data with non-sensitive equivalents, or tokens, to enhance security. Although it is a valuable data protection strategy, it does not specifically address the operational control measures that involve employee behavior and transaction oversight in financial environments.

Access badge readers are security devices that control entry to physical locations but do not constitute an operational control for financial processing. While they enhance security, they do not manage the processes or behaviors of employees involved in financial activities.

Biometric systems authenticate individuals based on physical characteristics, such as fingerprints or facial recognition. Though important for security, biometrics focus on access control rather than on the operational processes that govern financial transactions and employee accountability.