An organization has classified their data into iscc video

Full Certification Question

An organization has classified their data into different categories based on their sensitivity, but they are not consistently applying access controls. What is the risk of not consistently applying access controls?