An organization has a policy in place that states the person who approves firewall controls/changes cannot be the one implementing the changes. Which of the following is this an example of?
A. Change management
B. Job rotation
C. Separation of duties
D. Least privilege