Question

During a review of production process automation, an IS auditor discovers that several unattended batch scripts authenticate to the database and file servers using service account credentials that are stored in plaintext within the scripts themselves. The scripts run on a scheduling server accessible to multiple operations staff. Which of the following is the auditor's GREATEST concern?

Accepted Answer

Plaintext credentials embedded in scripts can be read by unauthorized staff and enable untraceable access to sensitive systems

Answer

The service accounts may have privileges that exceed what the batch jobs require

Answer

The scheduling server is a single point of failure for automated jobs

Answer

Batch job run times are not being captured for capacity planning