Based on my experience with hospital's IT security, the amount of data breaches from insider incidents and theft could drastically be reduced by implementing a simple remote access management system that controls privileged access and access rights.

Just read an interesting article describing this kind of system for the healthcare sector.

http://minicom.com/HealthCareIT.html