There is much of interest that raises further questions, as the report acknowledges. Not the most serious, but VERY odd sounding is 2.23 - 8
"The password login details of the Level 2 NERL engineer could not be readily verified due to the architecture of the system"
What 'system architecture' deliberately inhibits a valid login?
Or maybe: What overall system design prevents access to a system by a nominated engineer?