A shipping company wants to ensure that its organizational security policies prevent employees from approving a purchase and then being able to also make that purchase. What type of control should be within those policies to mitigate against that happening
Least Privilege
Separation of duties
Background checks
Job rotation
Mandatory vacation