4.3 How well does your company decide, grant and communicate access privileges for data to staff and partners?