This access management policy provides the ability to detect fraudulent employee activity when the employee does not have access to corporate systems for a period of time.
O job rotation
O mandatory vacation
O least privilege
O separation of duties