Which of the following would be the best choice to implement to address this audit concern while maintain the current infrastructure?