According to Nick Nikols, Vice President and GM, Identity, Security, and Windows Management for Quest Software, it is common to find incorrect resource access permission in almost all organizations.
FORBES: Data Security and Identity Access Management