Audit Report 4-42: Audit of SBA’s Email System
Date Issued: Friday, September 10, 2004
Report Number: 4-42

On September 10, 2004, the OIG issued Audit Report 4-42, Audit of SBA’s Email System.  The overall objective of this audit, conducted by Independent Public Account (IPA), was to review existing information security controls and identify weaknesses affecting certain components of the Exchange E-Mail System.  Using standards issued by the National Security Administration, the IPA concluded that the SBA’s Exchange Email System server was vulnerable.