SECURITY IS DESIGNED TO PREVENT PERSONS INVOLVED IN THE PROGRAMMING AND OPERATIONS OF THESE DATA SYSTEMS FROM EXECUTING ILLEGAL CHECKS FOR PERSONAL GAIN. OVERALL RESPONSIBILITY FOR AN ADEQUATE SYSTEM OF CONTROL SHOULD BE ASSIGNED TO ONE PERSON. EXAMINATION OF THE OVERALL DESCRIPTION OF EACH ACTIVITY'S SECURITY CONTROL SYSTEM SHOULD BE LIMITED TO THE MINIMUM NUMBER OF LOCAL UPPER MANAGEMENT PERSONNEL DEEMED ESSENTIAL TO THE SUCCESS OF THE SYSTEM AND THOSE PERFORMING OFFICIAL AUDITS OR INSPECTIONS. AUDIT OR INSPECTION REPORTS PREPARED FOR NORMAL DISTRIBUTION SHOULD NOT INCLUDE ANY INFORMATION, FINDINGS, OR RECOMMENDATIONS WHICH WOULD BE OF ASSISTANCE TO PERSONS INCLINED TO COMPROMISE THE SECURITY CONTROL SYSTEM. FULL DISCLOSURE SHOULD ONLY BE MADE ORALLY AND IN CLASSIFIED REPORTS TO DESIGNATED PERSONS. A SECURITY SYSTEM CHECKLIST IS PROVIDED. (RCB)