Access for sensitive data EPM Workforce

Hi

We have selected level of workforce detail to manage at the Employee and Job level. and decided to upload actuals of employee compensation.

But as per the HR policy no one should be able to view the employee compensation actual details such as salary, bonuses etc. except for Authorized HR Users.

1 . Can i know the general security features embedded in this tool for workforce as this is a very common scenario in any corporation

2.We have given service admin to some of the IT users in the client place so that they can manage the application. but however this will be an issue in the future as they would be able to see actual salaries of employees. (For end users we have planned to restrict the module through navigation flows)