Question # $2$

Scenario:

You are tasked with auditing the information security measures of a medium$-$sized ecommerce company. During your assessment, you discover that the company stores

customers' payment card information in plaintext format within its database. Explain

the potential risks associated with storing sensitive information in plaintext and

recommend controls to mitigate these risks.

Question # $3$

Scenario:

You are conducting an audit of a healthcare organization's electronic health record

$($EHR$)$ system. During your review, you observe that there is no documented procedure

for granting and revoking access to patient records. Discuss the importance of access