despite the preparatory measures taken, the guidance system failed to omit key vulnerabilities, allowing unauthorized users to kick off actions that were meant to remain under non-disclosure, potentially exposing sensitive information.