This article gave me a peek of what IT people do. In Cyber-Ark Software's "Trust, Security, and Passwords" survey, some surprising numbers were found in regards to what IT professionals do with their access. Over 400 of them were surveyed.
41% said they used administrative passwords to access records and confidential information in Human Resources and customer databases. As an HR professional, I find this intriguing that people do abuse this privilege. We go through great lengths and training to keep HR information private due to HIPAA and other legislation. Yet our own employees are basically hacking into the system just to look at these records and we can't do anything about it. Cyber-Ark's purpose is actually to sell software that prevents these security breaches from happening so its possible that the results are slightly exaggerated due to them wanting to get their product out there.

70% said there are monitors in place to control this access but 61% said there are ways around these. The other 30% said there is absolutely nothing in place to prevent IT abuse at their workplaces.
35% responded that sensitive data was leaked by ex-employees to competitors but only 10% of all data leaks are actually malicious.
This blog entry seems to point these issues towards cloud computing in which all file sharing is internet base. This increases the risk of someone entering and companies should be putting controls in place in order to prevent this.
