Information Technology General Controls at Aviation - November 2011
IT General Controls Review at Aviation
Released November 2011 Download the Full Report here We initiated this audit based on information technology control risks identified in previous audit reports from our office and the city’s external financial auditor. IT Control weaknesses were identified in our August 2009 performance audit Aviation Terminal Leases,our November 2010 performance audit Information Technology General Controls, and the 2008 and 2009 external financial audits. |
We found:
- Instances where procedures were not followed
- Continued risk from former employees and contractors retaining access to critical systems
- Configuration opportunities to better secure critical resources
- Open or partially addressed recommendations on security issues identified by consultants
- The department hot site is not yet operational
- The department did not always store backup tapes offsite
- The department face challenges complying with PCI (payment card industry) standards
- The department face challenges in meeting service level agreements
- Security and configuration management practices could be strengthened