"Furthermore, in industries such as health, professionals and managers often determine who has access rather than systems administrators." . . . . .