Security Think Tank: Human factor key to access control

In the modern business environment, what are the most common access control mistakes and how best are these corrected?