Identification should include
control procedures for access to assets
segregation of employee and management duties.