Reference no: EM133374494

Question: Prepare for a Risk Assessment (0/7 completed) The Acme Corporation The following vulnerabilities were identi?ed during a recent internal PCI DSS audit conducted bythe Acme Corporation As the risk assessor, you are expected to assess the vulnerabilities by focusing on the root causes. - Critical vulnerabilities exist on servers due to a lack of patch management procedures. - Employees routinely store critical information in cleartext on their local workstations. There is no system where employees can store critical information securely, nor has management budgeted for such any such system to be created. - Acme has an information security policy document that contains the following password policy: 0 2.2 Password Policy 2.2.1 All employees shall have a password for information services and computers they have been using. 2.22 Employees shall not share their passwords with other employees. 2.2.3 Employees shall not write their passwords on paper. 2.2.4 Employees shall not use their personal password in the computer and services of the Acme. - A production server has been discovered to contain a test account created when the server was in a staging environment. The same server contains user accounts that had been inactive for morethan 90 days. The most important discovery was that the IT department has not assigned an individual orteam to manage the administration of user accounts. - Acme has not been regularly monitoring and testing its IT infrastructure.