During a review a company was cited for allowing requestors to approve and implement their own
change request. Which of the following would resolve the issue? (Select TWO)
A.
Separation duties
B.
Mandatory access
C.
Mandatory vacations
D.
Audit logs
E.
Job Rotation
F.
Time of day restrictions