(a) Distinguish between procedures and processes.
(b) When would each be used?
(c) What is the segregation of duties, and what is its purpose?
(d) When someone requests to take an action that is potentially dangerous, what protections should be put into place?
(e) Why is it important to enforce mandatory vacations or job rotation?
(f) How do guidelines differ from procedures and processes?
(g) Distinguish between best practices and recommended practices
(h) Distinguish between resource owners and trustees in terms of accountability.
(i) What can the owner delegate to the trustee?
(j) What can the owner not delegate to the trustee?