An IT administrator for Acme Inc., a small anvil manufacturing company, used her

An IT administrator for Acme Inc., a small anvil manufacturing company, used her personal email address when creating cloud-based work accounts with CloudEmails.com for the company’s employees. However, when Acme decided to fire the administrator for unspecified issues, it discovered that she was the only one with admin access to the CloudEmails.com accounts, which included email files.
Complicating matters was the fact that Acme could not find the password on the former administrator’s computer; officials suspected that she deleted key files after she was terminated.
When the company contacted the fired administrator, she refused to provide the password credentials. CloudEmails.com, meanwhile, also refused to allow access to the files, saying that only the administrator could agree to allow access to her personal account.
What kinds of mistakes were made by the company and the administrator?