SUMMARY
DEPARTMENT
Matters from current audit
The Department of Environment and Sustainable Resource Development should improve the security patch management of servers.
Matters from prior audits
The department has implemented our 2008 recommendation to improve its controls over revenue.
FINDINGS AND RECOMMENDATIONS
DEPARTMENT
Matters from current audit
Security patch management of servers
Background
Patches and updates to operating systems are a critical component in keeping information secure. To be effective, these patches must be applied promptly. Properly patched systems are less vulnerable to external attacks and the risk that someone will compromise information contained in the system.