Refer to the information below to answer the question.
An organization experiencing a negative financial impact is forced to reduce budgets and the number
of Information Technology (IT) operations staff performing basic logical access security
administration functions. Security processes have been tightly integrated into normal IT operations
and are not separate and distinct roles.
Which of the following will MOST likely allow the organization to keep risk at an acceptable level?

A.
Increasing the amount of audits performed by third parties

B.
Removing privileged accounts from operational staff

C.
Assigning privileged functions to appropriate staff

D.
Separating the security function into distinct roles