A finance department currently lets one accountant both create new vendor records and approve payments to those vendors. An auditor flags this as a control weakness and recommends splitting these two functions between two different employees. Which access control principle is the auditor applying?