Audit: UW System hasn't protected computer systems

By  | 

MADISON, Wis. (AP) -- A new state report indicates the University of Wisconsin System hasn't developed a comprehensive computer security program.

The Legislative Audit Bureau's report Tuesday found the UW Information Assurance Council established authentication, data classification, security awareness, incident response and acceptable use policies in September 2016. But system administration hasn't taken significant steps to comply with regent policy to develop security.

Auditors said security weaknesses increase the risk of unauthorized changes to accounting, payroll and student data, exposure of personally identifiable information and cyber-attacks.

The report recommends security work continue and system officials train schools on procedures. The report noted that system administration agreed.

Sen. Robert Cowles and Rep. Samantha Kerkman, co-chairs of the Legislature's audit committee, said IT security is critical and they look forward to hearing about UW's progress.

The comment sections of our web set are designed for thoughtful, intelligent conversation and debate. We want to hear from the viewers but we are not obligated to post comments we feel inappropriate or violate our guidelines. Here are some of the criteria you should follow when posting comments:

Comments cannot be profane or vulgar. Children and families visit this site. We will delete comments that use profanity or cross the lines of good taste.

We will delete all comments using hate speech. Slurs, stereotypes and violent talk aren’t welcome on our web site.

Comments should not attack other readers personally.

We will delete comments we deem offensive, in bad taste, or out of bounds. We are not obligated to post comments that are rude or insensitive.

We do not edit user-submitted comments.

As a host WEAU 13 News welcomes a wide spectrum of opinions. However, we have a responsibility to all our readers to try to keep our comment section fair and decent. For that reason WEAU 13 News reserves the right to not post or to remove any comment.
powered by Disqus