Which of the following is not an appropriate statement with regard to computer control activities?

a. Computer operators should maintain control of all software programs.

b. The duties of application programming, computer operation, and control of data files should be separated.

c. Specific passwords should be required to access online files.

d. Computer programmers should be periodically rotated across different applications.