reduces the chance of an individual violating information security by increasing the scrutiny on any one user a$)$ need to know b$)$ least privilege c$)$ access control d$)$ separation of duties