What considerations would you take into account when implementing access controls for sensitive systems at Steward Health Care System?