The principle of boundaries includes all EXCEPT

• A. software programs for access validation.
• B. authentication procedures.
• C. audit-trail mechanisms.
• D. off-site storage of data.

Answer: (D)

Boundaries are the controls that limit access to information resources and define who can do what under which conditions. Software programs for access validation enforce these limits by granting or denying access based on permissions. Authentication procedures verify the user's identity, which is essential to ensuring the boundary rules apply to the right person. Audit-trail mechanisms monitor and record access attempts, helping enforce accountability when boundaries are tested. Off-site storage of data, while important for backup and disaster recovery, does not by itself define or enforce access boundaries; it concerns where data is stored and how it's protected against local disasters, rather than restricting user access. Therefore, off-site storage is the exception.