To help prevent one job role from having sufficient access to create, modify, and approve payroll data, which of the following practices should be employed?

• Least privilege

• Job rotation

• Background checks

• Separation of duties