What is the most important decision an organization needs to make when implementing Role Based Access Control (RBAC)?

A.
Each user�s security clearance needs to be finalized

B.
The roles users have on the system needs to be clearly defined

C.
Users� data needs to be clearly labeled

D.
Users� must be segregated from one another on the IT system to prevent spillage of sensitive data

Explanation:
B is the correct answer because in Role Based Access Control (RBAC), users roles must be clearly defined so access to data based upon those roles can be limited according to organization policy.

Incorrect Answers and Explanations: A, C, and D: Answer A is incorrect because in RBAC users clearances are not considered. Answer C is incorrect because MAC labels every object and compares it to a subjects clearance, not RBAC. Answer D is incorrect because in RBAC users are not segregated from one another.