Laserfiche WebLink
a <br />COUNTY OF HAWAII <br />STATE OF HAWAII <br />Current Year Findings and Recommendations <br />Fiscal year ended June 30, 2008 <br />• User Access -Segregation of duty controls should be implemented so that functional users also do not <br />D have administrator access. <br />• Review of User Access -Management should conduct periodic reviews of user profiles and templates, as <br />D well as user access to key IT applications. <br />• Physical Access -The server room hosting the IAS application should remain locked at all times and only <br />be unlocked when access to the server room is necessary. Also, management may consider implementing <br />a physical access mechanism that requires alog-on to enhance monitoring and detective controls. <br />We did not identify a material impact to the financial reporting process as a result of these issues; however, the <br />LJ County and the Department of Data Systems can take steps towards enhancing and improving their IT general <br />~J controls by incorporating the recommendations listed above. <br /> <br />Q <br /> <br />LJ <br />0 <br /> <br />a <br />a <br />a <br />0 <br />5 <br />