An internal auditor is concerned with privilege creep that is associated with transfers inside the company. Which mitigation measure would detect and correct this?

An internal auditor is concerned with privilege creep that is associated with transfers inside the company. Which mitigation measure would detect and correct this?

A. Change Control
B. Change management
C. User rights reviews
D. Least privilege and job rotation

Answer
C. User rights reviews