The Office of the Comptroller of Puerto Rico issued a qualified opinion on the operations of the Computerized Information Systems of the Department of Labor and Human Resources. A qualified opinion is issued when the noncompliances individually or in the aggregate are significant, but not pervasive.
The Report reveals that the Department had not deactivated the access accounts and privileges of 66 former employees and three contractors of the mainframe and/or the SABEN system, despite up to three years having elapsed since their separation or contract termination. The mainframe is the computer that processes the data and the SABEN system in particular processes the information on unemployment claims. These deficiencies facilitate unauthorized access and improper use of these accounts.
The two-finding audit points out lapses in control of access to the SABEN system since the user list was not up to date. In addition, the Office of the Comptroller's auditors identified three users with access to screens that should have been segregated because they allow the performance of conflicting critical operations. These situations prevent the Department from maintaining the required evidence of the authorizations to grant the accesses, privileges and updates to users. This second and final report covers the period from October 16, 2019 to July 31, 2020.
See Audit Report TI-22-02.
To see other published reports, visit our Audit Reports section.
Some documents on this page are saved in PDF format.
To view these documents, you must have the following free program installed.
