An employee ' s mobile device used for work was stolen in a home burglary.

Biometric authentication is the strongest control listed for preventing unauthorized access to data on a stolen mobile device. It relies on a physical characteristic of the authorized user, such as fingerprint, face, or retina recognition, making it harder for a thief to bypass than a passcode, swipe pattern, or security question. Passcodes and swipe patterns can be guessed, observed, shared, or captured. Security questions are often weak because answers may be discoverable or predictable. Internal audit should also expect supporting controls such as encryption, remote wipe, mobile device management, automatic lockout, and incident reporting. However, among the options provided, biometric authentication provides the strongest access prevention control. Therefore, Option A is correct.