Two members of the finance department have access to sensitive information. The company is concerned they
may work together to steal information. Which of the following controls could be implemented to discover if they
are working together?
Least privilege access
Separation of duties
Mandatory access control
A mandatory vacation policy requires all users to take time away from work to refresh. Mandatory vacation
gives the employee a chance to refresh, but it also gives the company a chance to make sure that others can
fill in any gaps in skills and satisfies the need to have replication or duplication at all levels. Mandatory vacations
also provide an opportunity to discover fraud. In this case mandatory vacations can prevent the two members
from colluding to steal the information that they have access to.