Close Security Holes
Known security holes should be closed and regular security patches applied to software restricting data access. Data access should be granted on an as-needs basis. This can be reviewed regularly to ensure that access is altered appropriately once an employee has left the company or changed positions.
