IT pros typically have access to company servers, network devices, and data so they can perform their jobs. However, that access entails risk, including exposure of confidential information and interruption in essential business services. This policy from TechRepublic Premium offers guidelines for governing access to critical systems and confidential data.

From the policy:

Purpose

This policy provides guidelines for the company and its IT staff to ensure the appropriate administration of and access to critical systems and confidential data. It also includes procedures to follow and methods for monitoring to make sure that these requirements are consistently met.

Scope

All employees who have administrator access to systems and/or data, whether full-time, part-time, interns, volunteers or contractors are covered by this policy.