An internal auditor is concerned with privilege creep that is associated with transfers inside the
company. Which mitigation measure would detect and correct this?

A.
User rights reviews

B.
Least privilege and job rotation

C.
Change management

D.
Change Control