State University of New York

Health Science Center at Stony Brook: Selected General Controls Over Computer Network Security

The Health Science Center at Stony Brook teaches students and conducts research in health-related areas, and provides care to patients in clinics and a 504-bed hospital. The Center uses computer and telecommunications networks to support its various activities. We examined the adequacy of the Centerís controls for preventing unauthorized access to the networks, as well as the adequacy of the controls for ensuring the confidentiality, integrity and continued availability of the data stored on the networks. We found that certain improvements could be made in these controls. So as not to compromise the security of the network, our detailed findings and recommendations were not included in our report, but were presented separately to Center officials throughout the course of our audit.

For a complete copy of Report 2004-S-2 click here.
For a copy of the 90-day response click here.
For a copy of the associated follow-up report click here.