Risk No.

Risk Summary Risk Rating Recommendations 5 Exploitation of unpatched application security flaws could compromise confidentiality & integrity of BFS data. Moderate The BFS support team should implement procedures for reviewing & updating vendorrecommended patches so that patches ensure are applied in a timely manner. An automated notification process should be developed to notify the appropriate individuals of critical updates. 6 Exploitation of passwords in script & initialization files could result in compromise of confidentiality & integrity of BFS data. Moderate The client software should be rewritten so that clear-text user IDs & passwords are not used in script and initialization files. 7 Compromise of

Activities are grouped accordingto location. A combination of the functional and divisional.Dual reporting lines