Thick-client tax software caches credentials on clerk workstations, and the backend database grants a single service account rights far beyond its job. What is the best remediation focus?
Select an answer to reveal the explanation.
Short Explanation
Cached passwords on the desktop plus a god-mode DB account is two open windows on the same house. Fix the client stash, harden the server, and shrink that database login to what the job actually needs.
Full Explanation
Client, server, and database tiers each introduce distinct vulnerabilities. Local credential caches expand endpoint compromise impact; overly broad database service accounts enable lateral misuse. Remediation should remove insecure client storage, harden hosts, and enforce least-privilege database roles rather than broadening access.