Splitting a sensitive process so that no one person can complete it alone — the person who sets up a supplier is not the person who approves its invoices or releases the payment. In a system this is expressed as roles and permissions, and as rules about which combinations of them one user may hold.