How do you ensure separation of duties for developers and IT teams while still being able to do your job? Once the access is setup correctly, how do you make sure it stays that way?

NCSU has several non-production environments and the access needs in all those environments are slightly different. We will review how we've set up security for IT teams and the custom audits and monitoring that we've put into place to ensure access doesn't change.