Segregation of Duties Policy 1. Identify the roles and responsibilities for policy implementation. 2. Identify the physical separation of duties regarding responsibility for information systems security policy implementation. 3. Align responsibilities for policy implementation with domains of IT responsibility. 4. Apply separation of duties to a layered security management policy. 5. Create a layered security management policy defining separation of duties.