> 1) access restrictions such that even malicious interns, and certainly careless interns can do little damage when the inevitable leak happens this should be

> 1) access restrictions such that even malicious interns, and certainly careless interns can do little damage when the inevitable leak happens this should be something that is implemented in any organisation beyond a very small scale, mainly because even if not malicious, people should not be able to make critical mistakes in systems they have no know how off. The intern leaked the password, but how was he able to know this was critical information? Not to mention he should never have been put in that position in the first place.