Comment by lrvick

My worry is rarely about an employee being dishonest. It is about what a dishonest person will do to that employee to obtain their access.

Any organization putting billions of value in the control of any single individual or computer should be treated as though they were caught trying to donate to North Korea with plausible deniability.