A small startup organization does not have the resources to implement segregation of duties. Which of the following would be the MOST effective compensating control?

A. Rotation of log monitoring and analysis responsibilities
B. Additional management reviews and reconciliations
C. Third-party assessments
D. Mandatory vacations