Will an IT consultant evaluate user access control policies