ISA-2000-6092

The primary objective of this audit was to evaluate IS general controls at the NCSA. The scope of our IS general controls audit included general security issues, access controls, program maintenance, physical security, operations procedures, system software, telecommunications, and disaster recovery. Other IS general control topics were reviewed as considered necessary. We also evaluated controls for the NCSA One Card operations. The NCSA One Card provides the School with a one-card system that allows access to campus services and facilities. Our initial field work identified several weaknesses in the NCSA One Card policies and procedures. These weaknesses were reported to the School and appropriate corrective action was taken and documented in our follow-up review.