Universal Containers allows all employees to submit reviews for leadership using a custom object called Review. These Reviews should only be visible to the HR department and the employee who submitted the record.

Which three steps should an app builder take to properly control access to Reviews?

Choose 3 answers