When Granting Third Parties Temporary Access to an Entity's Computer

When granting third parties temporary access to an entity's computer systems, which of the following is the most effective control?

A) Access is approved by the supervising manager.
B) User accounts specify expiration dates and are based on services provided.
C) Administrator access is provided for a limited period.
D) User accounts are deleted when the work is completed.