A recent audit has revealed that all employees in the bookkeeping department have access to confidential
payroll information, while only two members of the bookkeeping department have job duties that require access
to the confidential information. Which of the following can be implemented to reduce the risk of this information
becoming compromised in this scenario? (Choose two.)
A.
Rule-based access control
B.
Role-based access control
C.
Data loss prevention
D.
Separation of duties
E.
Group-based permissions
i think this should be B and D.