Which of the following is not an appropriate statement with regard to computer control activities?

A. The duties of application programming, computer operation, and control of data files should be separated.

B. Specific passwords should be required to access online files.

C. Computer operators should maintain control of all software programs.

D. Computer programmers should be periodically rotated across different applications.