Acxiom manages customer information for credit card issuers, banks, automotive manufacturers, and retailers. A systems administrator for a company doing business with Acxiom exceeded his authorized access, downloaded an encrypted password file, and used a password-cracking program to access confidential IDs. The intrusion cost Acxiom over $5.8 million.
Discuss the similarities and differences between the internal controls that allowed this fraud to occur and between the AIS controls recommended preventing future occurrences.