Information Security: Weak Controls Place Interior's Financial and Other Data at Risk

摘要

We reviewed information system general controls over the financial systems maintained by the Department of the Interior at its National Business Center (NBC) in Denver, CO. Effective information system general controls are critical to NBC-Denver's ability to safeguard assets and ensure the confidentiality and reliability of financial management information. Such controls also affect the security and reliability of nonfinancial information, such as personnel information maintained by NBC-Denver. Additionally, NBC-Denver uses its information systems to provide computer processing services to other federal agencies. Our review of Interior's information system general controls was performed in connection with the department's financial audit conducted under the Chief Financial Officers Act of 1990, as expanded by the Government Management Reform Act of 1994. Our evaluation included follow-up on the computer security weaknesses previously identified by Interior's Office of Inspector General (OIG). The results of our evaluation of information system general controls were shared with Interior's OIG for its use in auditing Interior's consolidated financial statements for fiscal year 2000.