There was no formal policy regarding review of user profiles and unused IDs. However, review was performed for users on sharedrive.
Although there was an unauthorised person, the production line and office network are separated. Therefore, the unauthorised access to the SCBT application in the production line is prohibited.
In addition, the requestor had to request to access to the server room which was approved by IT Manager and Fastcheque Supervisor. Moreover, the Programmer (Khun Chalinee) was not assigned in the program sharedrive and further, the SCBT application cannot add and modify data.