Which of the following is an example of a compensating control in a DoD environment where full segregation of duties cannot be achieved due to limited staffing?
-
A
Eliminating the control requirement entirely
-
B
Supervisory review of all transactions processed by one individual
-
C
Outsourcing the function to a private contractor
-
D
Increasing the materiality threshold