The list of violations is long, including a lack of necessary encryption and security policies.