The Office of the Comptroller of Puerto Rico issued a qualified opinion of the operations of the Office of Information Technology of the Office of the Ombudsman for the Elderly. A qualified opinion is issued when individual or combined noncompliance is significant, but not pervasive.
The Report reveals that, as of August 22, 2020, the Office of the Ombudsman for the Elderly had not conducted a risk analysis report of the information systems. This analysis, which must be conducted every 24 months, establishes the controls to reduce material damages, minimize the loss of information and protect the assets.
The two-finding audit points out the lack of periodic backups of the information stored on the servers. This situation, contrary to the best practices established in the guidelines of the Federal Information System Controls Audit Manual, may cause the permanent loss of information.
In addition, the Office did not have an alternate server from which to restore its computerized operations in case of emergency or disaster. This deficiency could delay or prevent the restoration of the files and the reestablishment of the normal operations of the computerized information systems.
The report covers the period from February 24 to October 30, 2020.
See Audit Report TI-22-03.
To see other published reports, visit our Audit Reports section.
Some documents on this page are saved in PDF format.
To view these documents, you must have the following free program installed.
