You work for a company that is growing. Originally, all the users in all departments had access to all the data in the database. It is considered a security risk. What is an appropriate action to reduce the risk?

Install a two$-$step login procedure, where the user has to key in additional information for logging in$.$

Install and provide stronger anti$-$virus software on the users' computers.

Tweak the firewall parameters so that outgoing traffic can be better controlled.

Assign roles and privileges to users so that only job$-$relevant data is accessible to the user.