1) Why is identity verification so important?

2) A software vendor that was installing a software management tool that was being used in one of our departments needed a userid in our Active Directory system. They needed the userid to have rights to access all the computers in the department. What they asked for was an account with full domain access. Do I give it to them? It is just for the server program. Why or why not?

3) Lets say you have an Intel PC running Microsoft Windows 7 and attached to the PC via a PCI connection is a credit card swipe terminal. Running on the PC is a Retail Application Package that is making the PC a cash register. What risks do I have with the credit card information? How can I protect the credit card information? Please focus on the system, processes, and data path.