A financial firm's security manager introduces a policy requiring all employees who handle wire transfers to take at least one consecutive week of vacation each year, during which another employee performs their duties. The goal is to expose any fraudulent activity that might be hidden by the primary employee. What type of security control is this mandatory vacation policy?