💡 This control is proactive—it prevents unauthorized access by ensuring that any additional access rights must be formally approved by a supervisor who understands the necessity and legitimacy of the request. By controlling who can gain further access to the power plant, the organization minimizes the risk of unauthorized individuals obtaining access. A. Offboarding procedures address removing access for individuals who no longer need it, which is important but reactive. B. Scanning logs for anomalies is a detective control used after access has occurred. D. Automatic notifications for nonwork hours also serve as a detective measure rather than preventing the access itself.