It is important to review access control practices as they relate to information assets and verify possible incompatible access provided to outsourced personnel to ensure
a. proper classification of accounts
b. data protection
c. proper disclosure
d. accurate valuation