Failure to prevent inappropriate access is at least as wrong as failure to provide adequate and
appropriate access