CompTIA SecurityX (CAS-005) CAS-005 — Question 372

A security engineer receives the following findings from a recent security audit: • Data should be protected based on user permissions and roles • User action tracking should be implemented across the network • Digital identities should be validated across the data access workflow Which of the following is the first action the engineer should take to address the findings?