Two members of the finance department have access to sensitive information. The company is
concerned they may work together to steal information. Which of the following controls could be
implemented to discover if they are working together?

A.
Least privilege access

B.
Separation of duties

C.
Mandatory access control

D.
Mandatory vacations

Explanation:
A mandatory vacation policy requires all users to take time away from work to refresh. Mandatory
vacation give the employee a chance to refresh, but it also gives the company a chance to make
sure that others can fill in any gaps in skills and satisfies the need to have replication or duplication
at all levels. Mandatory vacations also provide an opportunity to discover fraud. In this case
mandatory vacations can prevent the two members from colluding to steal the information that
they have access to.