Which of the following is the BEST compensating control for a lack of proper segregation of duties in an IT department?

A. Authorization forms
B. Audit trail reviews
C. System activity logging
D. Control self-assessment (CSA)