Which data governance concept is illustrated when one department can view test results while another can view only billing charges?

Which data governance concept is illustrated when one department can view test results while another can view only billing charges?

• A. Audit trail
• B. Authentication
• C. Access
• D. Authorization

Answer: (C)

Access control is about who can view or use data. When one department can see test results and another can only view billing charges, the system is enforcing different permissions so each group is allowed to access only the data they need. This is exactly what access controls regulate—limiting data exposure based on role or policy to protect sensitive information. Authentication verifies identity, and authorization determines what an authenticated user is allowed to access, while audit trails log the access. The scenario focuses on who is allowed to access specific data, which is why access control is the best fit.

Access control is about who can view or use data. When one department can see test results and another can only view billing charges, the system is enforcing different permissions so each group is allowed to access only the data they need. This is exactly what access controls regulate—limiting data exposure based on role or policy to protect sensitive information. Authentication verifies identity, and authorization determines what an authenticated user is allowed to access, while audit trails log the access. The scenario focuses on who is allowed to access specific data, which is why access control is the best fit.