Slashdot videos: Now with more Slashdot!
The correct answer (and what I have done in the past) is to call internal audit and run it past them. When it bubbles up that not having controls around powerful accounts is going to show up as an exception on your SEC filing the tune will change.
It is everyone's responsibility, network admin up to CEO, to protect the stakeholders.
1. Grab the nearest book.
2. Turn to page 23.
3. Find the fifth sentence.
4. Post the text of the sentence in your journal along with these instructions.