The Comptroller of Puerto Rico issued a qualified opinion on the operations of the computerized information systems of the Systems Development and Maintenance Office of the Ports Authority of Puerto Rico. A qualified opinion is issued when the noncompliance items, individually or together, are significant, but not pervasive.
The Report reveals that the Ports Authority had not prepared the risk analysis report for the computerized systems. Through this process, the information system assets and their vulnerabilities are identified, and the appropriate security measures and controls are established. The lack of this report prevents the Authority from estimating the impact that risk elements would have on its most important equipment and applications.
The three-finding audit notes that the Authority does not have an alternate computing center prepared to restore services in case of emergency. Despite the investment of $95,792 in equipment for the designated alternate center, it does not have the necessary electrical infrastructure and the air conditioners were installed in the wrong locations. This situation is attributed to the lack of planning, communication and action by the personnel of the Conservation Division and the Systems Office.
The auditors identified multiple environmental control failures in the cabling distribution areas such as water leaks, lack of temperature and humidity gauges, and air conditioners that do not work, among others. These situations may cause damage and premature deterioration to the network equipment and affect the continuity of the services it offers. The Authority has 47 areas with the communication equipment and the main network connections.
The Ports Authority has a wide area network (WAN-Wide Area Network) that connects 69 servers and 307 computers among the computing center, the Authority's offices, the buildings of the Maritime Bureau, the airports and the piers, among others.
The Report covers the period from October 9, 2018 to March 26, 2019.
See Audit Report TI-20-06.
To see other published reports, visit our Audit Reports section.
Some documents on this page are saved in PDF format.
To view these documents, you must have the following free program installed.
