Consider the following requirement: An auditing policy explicitly requires that employees cannot see the contents of complaints made against…

To satisfy the requirement that employees cannot see complaints made against themselves, an

Access Control Policy (B) is the most suitable security solution. Access Control Policies in Pega allow

for the definition of conditions under which access to certain data or cases is granted or denied. By

configuring a policy that checks the relationship between the complaint and the employee (such as

matching IDs), the system can dynamically restrict access to sensitive information, ensuring

compliance with auditing policies.

Reference: Pega Community documentation on Access Control Policies.