In an IT organization where many responsibilities are shared, which of the following is the BEST control for detecting unauthorized data changes? Users are required to periodically rotate responsibilities Data changes are logged in an outside application. Segregation of duties conflicts are periodically reviewed Data changes are independently reviewed by another group