The United States African Development Foundation's chief information security officer document and implement a process to remove users' administrator access to foundation workstations and prevent_x000D_ granting that access in the future. This process must include documenting the risk of such access and documenting the approval of any exceptions, along with adequate compensating controls.