Measures to reduce security threats - general controls
Division of responsibility

In a computer installation this is normally applied as follows:

Information systems should be organisationally independent from all departments that use data.

It should not be assigned the functions of:

Within IS function, the major segregation of duties is between the systems development function and computer operations. This is necessary because the individuals with detailed knowledge of the programs and database must not also have access to them.