Audit finds gaps in state payroll system security

A recent audit of the system that manages human resource records and state financial activity showed there’s room for improvement, according to state auditor Nicole Galloway.

The system was given a rating of “good,” which is just below the optimal “excellent” rating.

“After the last audit, system administrators and management clearly took audit recommendations seriously and made substantive improvements to system security in both operations and policy, but we must never become complacent,” Galloway said. “We know that cybersecurity is an area where we must remain vigilant, and that means continuing to identify and correct security gaps in order to ensure our information and the integrity of our systems remain protected.”

The system manages records for more than 50,000 state employees and hundreds of vendors, businesses and contractors who work with the state.

One risk the audit identified is 18 former employees that still had access to the system more than a month after their employment ended.

The audit report also recommended improvements to internal policies that could better protect sensitive information and assist in contingency planning in the event of a disaster or other disruption of service.

The full report can be read by following this link.