In ________, there must be two authorized individuals available to approve any sensitive activity. separation of duties double indemnity dual control two-person control