[prev in list] [next in list] [prev in thread] [next in thread]
List: isn
Subject: [ISN] Tighten computer security, auditor general tells province
From: InfoSec News <alerts () infosecnews ! org>
Date: 2006-07-31 7:28:05
Message-ID: Pine.LNX.4.61.0607310227530.19722 () conundrum ! infosecnews ! org
[Download RAW message or body]
http://www.cbc.ca/canada/nova-scotia/story/2006/07/26/auditor-ns.html
July 26, 2006
CBC News
Nova Scotia's new auditor general says he's concerned the province has
left security gaps in some of its computer systems.
In his first report since starting the job in March, Jacques Lapointe said
a computer system in the Department of Community Services has left a door
open for mistakes or abuse.
Lapointe listed a number of problems, including too many people with one
password. He noted some of these people had moved on to other jobs and
shouldn't be authorized to use certain computer files.
A big concern for the auditor general was that most of the computer
security issues had been raised in the past by previous auditors general.
"The speed of reaction to these has not been great, and I'm concerned that
similar issues keep getting brought up," Lapointe said.
He didn't cite any specific examples of mistakes or wrongdoing that
resulted from the problems, but said the systems expose government to
great risks.
Lapointe said a lack of information about spending estimates for 2006-07
made a full evaluation impossible.
The auditor general found other problems that were not related to computer
security, such as health authorities that are forced to make business
decisions about how to run hospitals before budgets are approved.
He also said school boards are open to risk because there are few controls
over the millions of dollars they fundraise.
_________________________________
Attend the Black Hat Briefings and
Training, Las Vegas July 29 - August 3
2,500+ international security experts from 40 nations,
10 tracks, no vendor pitches.
www.blackhat.com
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic