Full AWS Practitioner Certification Question

Which of the following is NOT a direct implication of failing to properly define system boundaries in an organization managing sensitive data?