Today’s SY0-701 CompTIA Security+ Pop Quiz: That doesn’t sound like a good idea

A recent audit has found all users in the Accounting department have access to data outside the scope of their job descriptions. Which of the following security processes was not followed?