All Information Security controls and frameworks depend on two key principles: Separation of Duties & Least Privilege