What policy applies when no one in the Engineering department should have access to the Accounting System?

• A. General Policy
• B. Restricted Access Policy
• C. Internal Use Policy
• D. Role-Based Access Policy

Answer: (A)

The suitable policy in this context is one that categorically prohibits certain individuals from accessing specific systems based on their department or role within the organization. This aligns with the concept of restricting access based on organizational needs and security requirements.

A general policy typically sets the framework for overall access and security within the organization, but it does not provide the specific granularity needed for such restrictions. On the other hand, the restricted access policy is designed precisely for instances where access is limited to specific groups or roles based on sensitive data or systems, making it the correct choice in this scenario. This ensures that sensitive information within the accounting system remains safeguarded from those in the engineering department, thereby reducing the risk of unauthorized access.

The internal use policy generally deals with how internal data should be handled within the organization, and the role-based access policy focuses on permissions granted based on an employee's role within the organization rather than restricting access based on departmental boundaries. This further clarifies why the restricted access policy is more suited for situations requiring such specific access limitations.