"9Such procedures must include document routing and other security procedures or security arrangements, including separate physical locations, which would maintain the independence of the two persons activities." . . . .