The Comptroller of Puerto Rico issued a qualified opinion on the operations of the Information Systems Office of the Agricultural Experiment Station of the Mayagüez Campus of the University of Puerto Rico. A qualified opinion is issued when the noncompliance, individually or in the aggregate, is significant but not pervasive.
The Report reveals that the Contingency Plan for Business Continuity approved in 2009 was not updated and had not been distributed to the relevant employees and officials. In addition, the annual tests certifying the effectiveness of the Plan had not been carried out. These situations foster improvisation and, in cases of emergency, the appropriate measures not being taken in an orderly manner.
The three-finding audit points out that the technology specialist had accounts with administrative privileges on two servers and on the eBlue application, despite being on leave without pay since February 16, 2017. In addition, five other employees used the specialist's account, contrary to the standard that each of these accounts is assigned a unique password that must not be shared.
The Report indicates the difficulty for the programmer analysts to understand the operation of the processes and controls of the eBlue application, since the Station did not have programmer and user manuals. The Information Systems Office only had four instructional videos.
The Report covers the period from March 22 to November 1, 2018.
See Audit Report TI-20-02.
To see other published reports, visit our Audit Reports section.
Some documents on this page are saved in PDF format.
To view these documents, you must have the following free program installed.
