Which of the following controls should be used to verify a person in charge of payment processing is not colluding with anyone to pay fraudulent invoices?

Which of the following controls should be used to verify a person in charge of payment processing
is not colluding with anyone to pay fraudulent invoices?

A.
Least privilege

B.
Security policy