Discuss when serving in a dual role becomes necessary. How is compensating management controls must be implemented to ensure changes to the security posture are properly authorized.