A security analyst wants to prevent current employees who previously worked in different departments from accessing resources that are no longer necessary for their present job roles.
Which of the following policies would meet this objective?
A . Job rotation
B . Discretionary account
C . Least privilege
D . Mandatory vacation
E . Separation of duties
Answer: C