Identify departments that operate by using policies and procedures written by the organization or by regulatory agencies. This can include areas as complex as manufacturing processes or as simplistic as accounting procedures. Make a list of each area and the functions of the area that require review.