An investigation into February's attack revealed that the cyberthieves won access to the central bank network because of poor security controls.