During a third-party audit, it is determined that a member of the firewall team can request, approve, and implement a new rule-set on the firewall. Which of the following will the audit team most l…

Discretionary access control (DAC) allows resource owners to define access permissions, but it does not directly address the problem of one individual consolidating multiple critical workflow responsibilities.

Separation of duties (SoD) is a security principle that divides critical functions among different individuals or teams to prevent a single person from completing a task that could lead to fraud, error, or compromise without detection. The scenario directly describes a violation of SoD by allowing one individual to perform all three distinct roles (request, approve, and implement) for firewall rule changes.

Least privilege ensures users only have the minimum permissions required for their job, which is a related but distinct concept from dividing critical, sequential tasks among different individuals.

Mandatory access control (MAC) is a highly restrictive access model based on sensitivity labels and system-wide rules, which is not the primary recommendation for addressing the consolidation of operational responsibilities.