Employees that separate from the institution retain access to systemsControlDocumented policies & procedures