Audit Report 0-16: Audit of SBA’s 1999 Financial Statements-Information Systems Controls
Date Issued: Tuesday, April 25, 2000
Report Number: 0-16

On April 25, 2000, the OIG issued the Independent Public Account (IPA)’s report in Audit Report 0-16, Audit of SBA’s 1999 Financial Statements-Information Systems Controls.  The IPA found that the SBA made extensive progress toward implementing an agency-wide systems security program, but improvements were still needed.  For example, security policies and plans needed to be established, access controls needed strengthening, application development and change control procedures needed to be consistently applied, programmer’s access to operating systems needed to be controlled and monitored, segregation of duties controls needed improvements, and disaster recovery plans needed to be completed and tested.