During the Sarbanes-Oxley audit of a financial services company, you note the following issues. Categorize each of them into the area to which they belong: IT change management, logical access to data, and IT operations.

a. Five database administrators have access to the sa (system administrator) account that has complete access to the database.

b. Several changes to database structures did not have appropriate approval by management.

c. Some users continued to have access to the database even after having been terminated.

d. Databases are backed up on a regular schedule, using an automated system.