The best practice for selecting a system administrator
is making sure that the administrator on a particular system
does not have a vested interest in the data on that system.
What this means in larger organization is that often someone
in the IT department is in charge of administering the system.
Separation of duties is a subject that IBM has discussed in the
past, and it is also significant in the financial world. If a person
has no motivation to do anything with the data on that system,
then it’s unlikely that there will be a problem. The FDA has said
that if there is any evidence of intentional fraud that they would
pursue it as a criminal activity, and that is something that they
do look for.
