The correct matches are as follows: 1. Security system testing: Tracking and monitoring access to the network. 2. Access control measure: Restricting physical access to customers' card data. 3. Information security policy: Documenting software and network security requirements. 4. Network security practice: Not using default passwords or settings.