Logical Access Controls
Change enforced on a periodic basis
User restrictions on changing system configurations and installing/changing applications
Printing requires manager approval