Question $25$ of $40$

An employee in the human resources department has been accessing confidential employee records and sharing them with unauthorized individuals outside the organization. They are motivated by personal gain and have been receiving financial compensation in exchange for the data. What is an effective control to detect and prevent this type of insider threat?