A new colleague joins the sales team on Monday and, by Tuesday, can open payroll files, change supplier bank details and export the full customer list. Nobody planned that. The account was simply copied from a long-serving employee, whose access had grown over ten years and was never trimmed. Situations like this are common in companies that have never decided, in a structured way, who should...