A company with a two-person treasury department requires dual-authentication in order for payments to be made through online banking portals. To prevent business disruption when one treasury employee is absent, the remaining treasury employee uses the absent treasury employee's banking log-in and password to release daily payments. In this scenario, the company is exposed to which type of risk?