Consider this scenario: After many years, an employee is promoted to a position that has an elevated level of trust with his management. He started with the company in an entry-level position, and then moved from a supervisory to a managerial role. This role entails that the employee trains other employees and has a deep understanding of how the department functions. Which of the following actions should be taken in regard to this employee’s levels of access during the span of time he has worked for the company? A. Because this employee needs to train other employees, he should have the access granted in his previous roles. B. This employee should be granted access based on his current and past roles only after being formally reviewed for his effectiveness in the company. C. This employee should ask his manager to grant only the access that he would prefer to have. D. This employee should have prior access removed to ensure separation of duties and avoid future instances of security risk.