Auditors found existing security policies are not complete and they are in several locations. Password policies were incomplete and inconsistent. Other findings in this audit were of a sensitive nature and were reported to management in a private letter in the interests of information system security.

Document Entity Terms
First Published