What measures can we take to prevent staff from unauthorized access to the account information of other staff members: Risk Campaign Ideas, Singapore

Context: We work as mortgage specialists at OCBC Singapore, specifically in consumer secured lending with a focus on residential home loans. Our role involves being frontliners who meet with both internal and external stakeholders for referral of home loan applications. We also have access to customer information via CRM both on-site and off-site through our VPN.

Question 1: What measures can we take to prevent staff from unauthorized access to the account information of other staff members?

Question 2:  Have you ever faced a situation where a potential risk was identified and effectively addressed?