9.The company was recently subject to a hacking attack that resulted in the breach of several thousand records containing consumer financial data. All the following are examples of actions the company took to prevent such an attack, demonstrating due care, except: (A) Allowing all employees, regardless of duties, to access the data (B)Installing and securely configuring a firewall (C) Enabling encryption for all data (D) Requiring strong authentication methods