The organization should consider if security privileges need to be granted to specific users to create, approve and reject, view answers and close an assessment