Being the security manager for the XYZ Corporation, you are asked to find out the amount of access which a new user requires. You contact the user and ask them to help you understand what type of access they require. Explain the other questions you would ask? Will you think of any other ways to estimate this? How will you verify that the user requires this access?