How to keep IT security out of HR information

Content

Unfortunately, this is a question posed by my client.

How do you keep those that can assign roles (IT Security Manager) from assigning Human Resource Specialist to themselves and seeing the population of sensitive employee data?

 Thank you!