In a quarterly system access review, an active privileged account was discovered that did not

exist in the prior review on the production system. The account was created one hour after

the previous access review. Which of the following is the BEST option to reduce overall risk

in addition to quarterly access reviews? (Answer with explanation)

AIncrease logging levels.

BImplement bi-annual reviews.

CCreate policies for system access.

DImplement and review risk-based alerts.