A recent audit has revealed that all employees in the bookkeeping department have access to confidential payroll information, while only two members of the
bookkeeping department have job duties that require access to the confidential information. Which of the following can be implemented to reduce the risk of this
information becoming compromised in this scenario? (Select TWO)

A.
Rule-based access control

B.
Role-based access control

C.
Data loss prevention

D.
Separation of duties

E.
Group-based permissions