Department of State

Computer Network Security Controls

The Department of State licenses certain activities, administers building and commercial codes, and provides other regulatory and administrative services. We audited the controls for preventing unauthorized access to the automated information systems supporting these activities. We found that these controls were seriously inadequate. Moreover, since Department officials did not fully cooperate with our audit effort, we were unable to perform certain tests and unable to assess certain controls over access to the Department’s automated information systems. We recommend that Department officials take immediate action to strengthen the controls over access to these systems.

For a complete copy of Report 2001-S-47 click here.
For a copy of the 90-day response click here.
For a copy of the associated follow-up report click here.