Your project involves implementing a new human resources system. Certain roles within the human resources department will have differing levels of access. The director of human resources can access all human resources$-$related data, while a recruiting manager may only access applicant data. Which of the following are true regarding this question?

Each correct answer represents a complete solution. Choose two.

This describes one of the success criteria for the project.

B This describes an access control system that restricts access to data based on roles.

C This describes the functions each stakeholder will perform for testing purposes.

D You should implement the principle of least privilege to guard against cyberattacks.