A company has implemented a policy stating that users will only receive access to the systems needed to perform their job duties. This is an example of:

A.
separation of duties

B.
least privilege

C.
concurrent session control

D.
access control