Re: "They looked for the password on the CD . . ."
"good God how do they get away with this"
It is a pension fund. The lousy security is there so that the pension fund managers can claim that they were raided by "hackers" when it is found to be bereft of funds, and just before they resign and disappear to a small south pacific islands.