Refer to the information below to answer the question. An organization experiencing a negative financial impact is forced to reduce budgets and the number of Information Technology (IT) operations sta

Inadequate IT support is an operational concern rather than a primary security concern, and does not directly address the logical access security risks created by staff reductions.

Separation of duties is a core security principle that prevents any single individual from having unchecked control over sensitive processes. When staff is released and security roles are consolidated among fewer people, separation of duties is compromised, increasing the risk of fraud, error, and unauthorized access. Additionally, departing staff may take institutional knowledge or access credentials, creating a direct risk of data loss or exposure.

Undocumented security controls may be a secondary risk, but it is not the primary security concern when releasing staff who hold integrated security administration roles.

Additional responsibilities for remaining staff is a workload and operational concern, not a security concern, and does not specifically address the access control vulnerabilities introduced by the staff reduction.