Exam CISA topic 1 question 706 discussion

Unauthorized changes pose the greatest risk. Administrator rights allow users to modify configurations, access controls, and data.

As per the question users have read only or admin access. so confidentiality is not a concern. option A is the correct answer.

When most users have administrator access, the risk of unauthorized access to sensitive data is heightened. This could lead to data breaches, privacy violations, and potential non-compliance with regulations, which could have severe legal and financial consequences for the organization. While unauthorized changes (Option A) are a significant risk, the focus on "sensitive data" in the question indicates that the exposure or unauthorized viewing of this data is the most critical concern.