Second, you must make sure that people have access, by default, to everything they need. Most companies start out by adopting the reverse policy: everyone is only granted access to information and applications on a need-to-know basis. That’s completely unnecessary.
