The Chief Financial Officer (CFO) of an Organization Wants the IT

Multiple Choice

The Chief Financial Officer (CFO) of an organization wants the IT department to add the CFO's account to the domain administrator group. The IT department thinks this is risky and wants support from the security manager before proceeding. Which of the following BEST supports the argument against providing the CFO with domain administrator access?

A) Discretionary access control
B) Separation of duties
C) Data classification
D) Mandatory access control