An organization has a policy in place that states the person who approves firewall controls$/$changes cannot be the one implementing the changes. Which of the following describes this policy?

a$.$

Change management

b$.$

Separation of duties

c$.$

Job rotation

d$.$

Least privilege