Nov 2, 2007 1:47 pm US/Central
Sensitive Data Unprotected At Public Safety Dept.
ST. PAUL (AP) ―
-
-
Public safety officials said there's no evidence of any data breaches. They promised tighter oversight.
AP
Minnesota's top law enforcement agency failed to protect sensitive computer information and equipment such as laptop computers, the legislative auditor said.
The audit manager said inadequate oversight of computer security and equipment inventory at the state Public Safety Department put confidential information at risk and left the agency open to exploitation and even potential fraud.
"We don't believe any of that has happened, but we found serious weaknesses in the system," said audit manager David Poliseno on Thursday.
Public safety officials said there's no evidence of any data breaches. They promised tighter oversight.
"We have absolutely no indication that there was any private or sensitive data that was compromised. It's an issue of the schedule of getting everything encrypted so that if something was lost it wouldn't be compromised," Deputy Commissioner Mary Ellison said.
The audit found:
--Almost 950 of the agency's computers lacked encryption as recently as May, in violation of state policy. Poliseno said agency staff told auditors "they hadn't gotten around to it yet."
--Another 300 laptop computers had no cable locks or other physical security devices, making them vulnerable.
--The department didn't review employees for excessive or unnecessary use of the computer system. As of April, five former employees still had access to the system.
The Public Safety Department said encrypting the laptops is a challenge involving extensive planning, testing and money. The agency is doing mandatory inventory training and requiring all divisions to complete a physical inventory of equipment by June.
Lawmakers gave the agency less than half of a roughly $6 million request for disaster recovery and security system upgrades over the next two years.
The audit found no indication of problems with oversight of firearms or other dangerous weapons.
(© 2009 The Associated Press. All Rights Reserved. This material may not be published, broadcast, rewritten, or redistributed.)
Click to enlarge
Stumble It!
