A security professional is asked to provide a solution that restricts a bank teller to only perform a
savings deposit transaction but allows a supervisor to perform corrections after the transaction.
Which of the following is the MOST effective solution?
A.
Access is based on rules.
B.
Access is determined by the system.
C.
Access is based on user’s role.
D.
Access is based on data sensitivity.