Audit Report 4-41: Audit of Selected SBA Computer General Support Systems.
On September 10, 2004, the OIG issued Audit Report 4-41, Audit of Selected SBA Computer General Support Systems. The objective of this audit, conducted by an Independent auditor (IPA), was to review existing information security controls and identify weaknesses affecting certain components of the general support systems. The IPA found that the SBA’s computer general support systems and components contained a number of vulnerabilities, which increased the potential for security exposures to exist and go undetected. Further, these same systems did not follow a standard system configuration