A university student is reported in the media to have won $10,000,000$10,000,000$ on the lottery. The University uses the DAC formal model. What extra step to ensure compliance with data protection law should be considered by the University?

Question 29$\mathrm{<br>}$

a.$.$

Revise access control lists for relevant objects.

b.$.$

Switch to the MAC formal model.

c.$.$

Switch to the RBAC formal model.

d.$.$

 

 Block all access to the student's personal data. 

 

e.$.$

Carry out an information security audit.