Bill is promoted to a position that has an elevated level of trust. He started with the organization in an entry-level position, and then moved to a supervisory position and finally to a managerial role. This role entails that the employee trains other employees and has a deep understanding of how the department functions. Which of the following actions should be taken that provide adequate access for Bill without making him a target of suspicious activity? a. Because Bill needs to train other employees, he should have the access granted in his previous roles.
b. Bill should be granted access based on his current and past roles.
c. Bill should request that his access be downgraded.
d. Bill should have prior access removed to ensure separation of duties and avoid future instances of security risk.