I would certainly expect that any reasonably well managed company would have appropriate access controls in place, and yes, that includes the CEO not having dir

I would certainly expect that any reasonably well managed company would have appropriate access controls in place, and yes, that includes the CEO not having direct access to a production database. You don't need to be a financial institution to observe basic security practices.