Morey Haber, CTO and CISO at BeyondTrust, pointed to several other issues raised by the incident. Among them were questions about how Twitter might have protected the tool that provided access to the compromised account and why such a tool even existed in the first place.