Your project involves implementing a new human resources system. Certain roles with the human resources department will have differing levels of access. The director of human resources can access all human resources–related data while a recruiting manager may only access applicant data. Which of the following are true regarding this question? (Choose two.)

A. This describes the functions each stakeholder will perform for testing purposes.

B. This describes an access control system that restricts access to data based on roles.

C. This describes one of the success criteria for the project.

D. You should implement the principle of least privilege to guard against cyberattacks.