Jennifer is concerned that some people in her company have more privileges than they should. This has occurred due to people moving from one position to another and having cumulative rights that exceed the requirements of their current jobs. Which of the following would be most efficient in mitigating this issue?

A permissions audit will find what permissions each user has and compare that to their job requirements. Permission audits should be conducted periodically. Job rotation, though beneficial for other security reasons, will actually exacerbate this problem. It is impractical to forbid anyone from ever changing job roles, and separation of duties would have no impact on this issue.