Which control is MOST effective against an insider gradually collecting data across multiple systems?

1. ALonger password expiration periods for all staff
2. BSingle sign-on to every system in the company
3. CShared accounts for each team to simplify access
4. DLeast privilege with monitoring for unusual access