In November of 2015, STI customers were notified by e-mail that their accounts had been compromised and were being restricted unless they re-registered using an accompanying hyperlink to a Web page that had STIs logo, home page design, and internal links. The form had a place for them to enter their credit card data, ATM PINs, Social Security number, date of birth, and their mothers maiden name. Due to the diligent efforts of Tommy Lew, STI customer information was not breached, according to internal sources.

identify an internal control weakness explained above. Explain why it is a weakness and recommend a way or ways to correct the weakness.