Second, you must make sure that people have access, by default, to everything they need. Most companies start out by adopting the reverse policy: everyone is only granted access to information and applications on a need-to-know basis. That’s completely unnecessary. Unless you work in the military, or belong to one of the very rare firms that deal with super-confidential information—information that even trusted employees can’t be trusted with—keeping these access barriers in place is just making it difficult for everyone to get their work done.
