The Comptroller of Puerto Rico issued a qualified opinion on the operations of the Information Systems Office of the Public Buildings Authority. A qualified opinion is issued when the noncompliance items, individually or together, are significant, but not pervasive.
The Report reveals that the Authority has not obtained the expected benefits from the contracting of a company for $126,813 to develop the Time and Attendance and Human Resources modules of the Renova System. From the examination conducted it was found that the system does not calculate leave balances, reverts recorded schedule changes, or records deductions of hours and tardiness without any reason. This situation had been communicated to the company prior to the signing of a third contract.
In addition, continuous interruptions occurred in the connection to the Human Resources module and the employment certifications did not include all the fields. These situations are attributed to the changes of personnel assigned to the project, and to the fact that the company tested the system in the production environment and, when making changes, other functionalities were affected.
The three-finding audit notes that the Authority does not have a risk analysis report for the computerized information systems, nor a procedure for handling security incidents. These situations make it impossible to estimate how to protect the systems against the impact of risk elements and may cause duplication of effort in the event of unexpected situations.
The auditors identified that the annexes to the Authority's Contingency Plan, which dates from December 29, 2010, do not have updated and complete information. For example, they mention names of former employees, do not include the providers that offer maintenance, and the lists of computer equipment do not identify the assigned equipment, among other deficiencies.
The Authority has a network of 315 computers, 42 servers, 69 switches and 18 routers. At present, the Authority preserves and maintains 735 buildings constructed under its administration.
The Report covers the period from May 29, 2018 to December 14, 2018.
See Audit Report TI-20-05.
To see other published reports, visit our Audit Reports section.
Some documents on this page are saved in PDF format.
To view these documents, you must have the following free program installed.
