Segregation of duties

Separating who can do something from who approves it means fraud needs at least two people.

It is an old control and it holds up well, because collusion is much harder than acting alone. The modern failure is that it is designed carefully in finance systems and ignored in technical ones, where the same engineer frequently writes, approves and deploys, and holds the credentials to remove the evidence.