Businesses in the UK and US are failing to properly implement privileged access management, leaving them at risk of data breaches, ransomware and malware attacks. 

https://www.itproportal.com/news/many-employees-have-access-to-sensitive-data-they-do-not-need/