“The IT department can only go so far. Everyone says they follow procedures, but if you question them closely they will acknowledge making exceptions.”