An organization requires administrators to approve their own production changes. What risk principle is implicated?

1. An absence of encryption for public web pages only
2. Conflicting duties and weak independent change oversight
3. A need for more disk space
4. A requirement that all changes be manual