Which of the following is the BEST type of access control for an organization with employees who move between departments?

A. Mandatory
B. Role-based
C. Identity
D. Discretionary