Security Think Tank: Password management tops list of access control issues

In the modern business environment, what are the most common access control mistakes and how best are these corrected?