A recent audit has revealed that all employees in the bookkeeping department have access to
confidential payroll information, while only two members of the bookkeeping department have job duties
that require access to the confidential information. Which of the following can be implemented to reduce
the risk of this information becoming compromised in this scenario? (Select TWO)

A.
Rule-based access control

B.
Role-based access control

C.
Data loss prevention

D.
Separation of duties

E.
Group-based permissions