User must agree annually (via confidentiality reminder) to only access the specific information they have a business reason to access.See also: Level 2, Level 3, Level 4, SA6, Servers A