heraldsun.com: NCCU says computer security weaknes... -
[Cached Version]
Published on: 3/13/2002
Last Visited: 3/14/2002
"We're concerned with supporting our financial auditors [at institutions] and making sure there are adequate controls in place for them to audit financial statements and financial data," said Charles Williford, a state information systems auditor."The academic side by its very nature is going to be open [to computer access] because people need to experiment on things … but on the administrative side where you have all your payrolls, general ledger and accounting you don't want that stuff."
The audit also questioned the university practice of allowing ITS programmers to oversee security functions.Standard information technology policies recommend having more than one person perform those duties so that programmers, who may have unrestricted access in monitoring programs throughout the operating system, are monitored.