An audit takes place after company-wide restricting, in which several employees changed roles. The following deficiencies are found during the audit regarding access to confidential data: Which of the

Implementing separation of duties (SoD) ensures that no single individual has complete control over a critical or sensitive process, such as accessing and managing confidential payroll data. By dividing responsibilities and requiring multiple individuals for sensitive actions, SoD directly mitigates the risk of unauthorized access or misuse by employees, especially after role changes, thereby preventing future audit findings related to excessive permissions.

A DLP solution primarily prevents sensitive data from leaving the organization's control, rather than directly preventing inappropriate internal access due to flawed access controls after role changes.

While rule-based access controls are a good general approach to managing access, simply implementing them does not inherently prevent deficiencies if the underlying rules are not structured according to principles like separation of duties to limit excessive privileges.

Regular permission auditing and reviews are crucial for identifying existing deficiencies but do not inherently prevent them from occurring in the first place, which is the goal specified in the question.