What questions should Health Information Technology professionals ask themselves when faced with ethical issues?

Things like 'Who actually needs access to the information on the network - can a directory structure of restricted access be placed on it' and 'Is the confidential element of the information - especially patient details - secure when being sent over the network'