you work for a company that is growing. originally, all the users in all departments had access to all the data in the database. it is considered a security risk. what is an appropriate action to reduce the risk? a. install and provide stronger anti-virus software on the users' computers. b. assign roles and privileges to users so that only job-relevant data is accessible to the user. c. tweak the firewall parameters so that outgoing traffic can be better controlled. d. install a two-step login procedure, where the user has to key in additional information for logging in.