An IT administrator forAcmeInc., a small anvil manufacturing company,used herpersonal email address when creating cloud-basedworkaccountswith CloudEmails.comfor the company's employees.However, whenAcmedecided to fire the administratorfor unspecified issues, it discovered thatshe was the only one with admin access to theCloudEmails.comaccounts, which included email files.

Complicating matters was the fact thatAcmecould not find the password on theformeradministrator'scomputer; officials suspected thatshe deletedkeyfiles aftershe was terminated.

When thecompany contacted thefired administrator,sherefused to provide the password credentials.CloudEmails.com, meanwhile,alsorefused to allow access to the files,saying that only the administratorcouldagree to allow access to herpersonal account.

What kinds of mistakeswere madeby the company and theadministrator?