Which practice reduces the risk that a single administrator can both make and approve changes to production?

1. ASeparation of duties between change implementers and approvers
2. BLogging changes only after the monthly review
3. CGiving all administrators the same full privileges
4. DAllowing administrators to self-approve urgent changes