One employee can request, approve and pay a supplier invoice. Which principle would reduce this risk?

1. Maximum privilege
2. Anonymous authorization
3. Single sign-on
4. Separation of duties