Which of the following controls should be used to verify a person in charge of payment processing
is not colluding with anyone to pay fraudulent invoices?

A.
Least privilege

B.
Security policy

C.
Mandatory vacations

D.
Separation of duties