Watch this video on YouTube
An organization has classified their data into different categories based on their sensitivity, but they are not consistently applying access controls. What is the risk of not consistently applying access controls?