users, and computer operators had direct access to production
resources, increasing the risk that unauthorized changes to production
programs and data could be made and not detected.
Additional report findings included—