The information security officer in an organization has assigned various accounting department employees to various roles in the organization’s financial system, taking care to assign roles with the fewest possible functions. Roles have been assigned according to the principle of