Effective Settings
External access is a modest fraction of total use
collaboration, goverment oversight, safety monitoring
Restructuring internal partitioning would induce significant ineffeciencies
for example: Hospital: MD/patients vs research/insurance
Errors are seriously embarrassing
in practice 2-5% of data are misfiled, doing better is costly
Locus of security control is needed
Security officer cannot / doesn’t trust nor control
DB administrator must keep data accessible
network admin’s must keep network operating