Controls provide accountability for individuals who are accessing sensitive information. This
accountability is accomplished:

A.
through access control mechanisms that require identification and authentication and through
the audit function.

B.
through logical or technical controls involving the restriction of access to systems and the
protection of information

C.
through logical or technical controls but not involving the restriction of access to systems and the
protection of information.

D.
through access control mechanisms that do not require identification and authentication and do
not operate through the audit function.