database os hardening application hardening

Which of the following is MOST likely missing from the operational procedures?