. "A further need exists for adequate control over access rights to each device and resource, particularly management functions." . . .