Security policies have to provide for turnover in all sensitive positions.