IT pros typically have access to company servers, network devices and data so they can perform their jobs. However, that access entails risk, including exposure of confidential information and interruption in essential business services. This policy from TechRepublic Premium offers guidelines for governing access to critical systems and confidential data.

From the policy:

SUMMARY

IT professionals, such as system and network administrators, help desk staff, management personnel and sometimes external vendor representatives, are routinely provided full access to company servers, network devices and data so that they can effectively perform their jobs.

This access is a necessary part of their responsibility to set up, monitor, and safeguard access to these systems and data by non-IT personnel. Such duties involve backing up or restoring data, setting permissions, and performing audits or inventories.