CompTIA Security+ (SY0-701) SY0-701 — Question 515

A company is considering an expansion of access controls for an application that contractors and internal employees use to reduce costs. Which of the following risk elements should the implementation team understand before granting access to the application?