Employee access controls

Least-privilege, unique logins, disabling access on termination, and quarterly access reviews.