The system is lacking proper access controls if a third-party vendor was able to see secured project information in a recently implemented system that resulted in a fine for the organization. Access controls are security mechanisms that regulate who or what can view, use, or modify data or resources in a system or network. Access controls typically involve authentication and authorization processes that verify the identity and permissions of users or devices before granting them access. Access controls can help to protect data confidentiality, integrity, and availability and prevent unauthorized access, misuse, or theft12

Lessons learned, removing resources, and removing access are activities that a project manager would perform during the closing phase of a project. Lessons learned is a process of collecting and documenting the knowledge and experience gained from a project for future reference and improvement. Removing resources is a process of releasing or reallocating any human or material resources that were used for the project. Removing access is a process of revoking any permissions or privileges that were granted to the project team members or stakeholders for accessing any systems or data related to the project. These activities can help to finalize and close a project successfully and ensure that all deliverables are transferred, all documentation is approved and archived, all contracts are closed, and all stakeholders are satisfied.

The next step after defining tasks, durations, resources, and costs is to establish baselines. A baseline is an approved version of a project plan that serves as a reference point for measuring progress and performance throughout the project lifecycle. A baseline typically includes scope, schedule, cost, quality, and risk parameters. Establishing baselines involves presenting the project plan to key stakeholders and obtaining their formal agreement on the project objectives and deliverables. Baseline approval can help to establish clear expectations, avoid scope creep, and facilitate change control during project execution34

In order to find the client billing rate for a particular engineer, the project manager would need to refer to the SOW (Statement of Work). The SOW is a document that outlines the work to be performed, the timeframe for completion, and the cost of the project. It also includes information about the resources involved in the project and their billing rates. Reference: CompTIA Project+ Study Guide Section 2.2.
The project manager would need a statement of work (SOW) to find information about the client billing rate for a particular engineer. A SOW is a document that defines the scope of work for a project or contract. It usually includes information such as deliverables, milestones, timeline, costs, payment terms, quality standards, and acceptance criteria. A SOW can help to specify what services or products will be provided by whom, when, where, how, and for how much.

Explanation
Company vision and mission statement should be considered in the evaluation of the project portfolio based on the company's strategic plan. Company vision is a statement that describes the long-term aspirations and desired future state of the organization. Company mission statement is a statement that defines the core purpose and values of the organization and how it serves its customers and stakeholders. These statements provide direction and guidance for the strategic planning and decision making of the organization. They also help to align theproject portfolio with the organizational goals and objectives and ensure that the projects and programs in the portfolio deliver value and benefits to the organization