As a consequence, employees and contractors must be properly identified, authenticated and authorized to access data without compromising the access to sensitive information.