Policies and procedures most often have established preventative controls (policies, reviews and approval requirements) and detective controls (after-the-fact reviews) with the requirement to escalate to the Corporate Headquarters (Escalation Policy) violations that may require investigation, potential disclosure and disciplinary action.