$33.$ Which of the following is not one of the practices recommended for controlling access to social security numbers in business:

a$.$ limit access to records containing social security numbers only to those who need to see the numbers for the performance of their duties

b$.$ generally share social security numbers with other businesses that request them

c$.$ use logs or electronic audit trails to monitor employees$$ access to records with social security numbers

d$.$ refrain from storing records containing social security numbers on computers or other electronic devices that are not secured against unauthorized access