Be sure that a concept of separation of obligations is applied and reasonable accessibility controls and account lockout/disabling controls are in place. Don’t give blanket access to each and every personnel in the Firm; only give out what information and facts is necessary that can help lessen the probability https://ieeexplore.ieee.org/document/9941250