Karen is designing a process for issuing checks and decides that one group of users will have the authority to create new payees in the system while a separate group of users will have the authority to issue checks to those payees. The intent of this control is to prevent fraud. Which principle is Karen enforcing?

Question $3$ options:

Job rotation

Least privilege

Need$-$to$-$know

Separation of duties