Develop entity level procedures to ensure appropriate separation of duties and use of least privilege for privileged accounts. At a minimum, develop procedures to support the following processes: * Periodic review and adjustment of privileged user accounts and permissions, and * Inventorying and validating the scope and number of privileged accounts.