2 questions- First is there anything I can use to document why we do not give just anybody access to file maintenance on the computer database of customers? Second, Can a Compliance Officer have file maintenance on the customer database or would this be against internal controls? I really need something to prove either/or so I can document why we should or should not do these things. Thank you.
_________________________
"No one can make you feel inferior without your consent."
Eleanor Roosevelt