Weak IT systems put Alberta data at risk, says auditor general
Last Updated: Wednesday, April 16, 2008 | 4:33 PM MT
CBC News
All departments of the Alberta government need to do a better job managing its computer systems to protect confidential information, the province's auditor general said in his semi-annual report Wednesday.
Fred Dunn found that provincial ministries have a mishmash of information technology controls in place that differ in both design and effectiveness.
Alberta Auditor General Fred Dunn, seen here in November 2006, wants the province to tighten its IT and data systems.
(CBC)
"Upon examination of these efforts, we concluded that often the controls were ineffective or, at best, inefficient," Dunn said in his report, pointing out that weak frameworks can cost both money and time, and leave sensitive information open to unauthorized disclosure.
Dunn also said that the province hasn't sufficiently assessed the risks to their systems and data.
"They need to implement well-designed, efficient, and effective IT controls to mitigate these risks and provide secure services and programs to Albertans," he recommended.
His office carried out audits of three other major systems and found:
- Advanced Education and Technology needs to clarify standards for non-credit programs at post-secondary institutions, while the schools need to improve the way they approve programs, evaluate their quality, and report the costs of providing them.
- Poorly designed systems to monitor progress on the Provincial Mental Health Plan need to be improved.
- Four key recommendations made in a 2005 auditor general's report on seniors care are being implemented to update standards and institute regular reviews to monitor compliance with those criteria.
The auditor general, an independent examiner of every Alberta department, regulated fund and agency, reports to the legislative assembly twice a year in April and October.
