During a review a company was cited for allowing requestors to approve and implement their own change
request. Which of the following would resolve the issue? (Choose two.)

A.
Separation duties

B.
Mandatory access

C.
Mandatory vacations

D.
Audit logs

E.
Job Rotation

F.
Time of day restrictions