Security is top priority, but security is not at the expense of the user, says author. Organizations should strive to find a way to administer control over their systems, while at the same time providing users with flexibility in their roles. A least privilege environment can be established where users rights to download applications or make changes to corporate machines are limited to those necessary for the scope of their job. IT should see a reduction in service requests and incidents, freeing up resources to allocate to bigger, more strategic projects.”]