Insufficient Data Encryption and Access Controls

Failure to encrypt sensitive data at rest and in transit, coupled with weak access control policies, allows unauthorized access to critical information.