Skip to main content Skip to office menu Skip to footer
3 golden objects Minnesota Legislature

Office of the Legislative Auditor - Financial Audit Division

Report Summary
Minnesota Office of Enterprise Technology
Mainframe Security Audit

 

Financial Audit Division Report 05-55 Released December 7, 2005

Conclusion:

Even though the Office of Enterprise Technology deployed multiple layers of security, data stored on the state’s central mainframe computers was still vulnerable to loss, tampering, and unauthorized disclosure.

Key Findings:

  • The Office of Enterprise Technology does not have a comprehensive security program to address pertinent technology risks.
  • Access to mainframe computer programs and data was not adequately restricted.
  • Unauthorized changes to critical system files could occur and could go undetected.
The audit report contained eight audit findings relating to internal control over the Office of Enterprise Technology’s mainframe computing environment.
   Audit Scope:

Audit Period:
As of October 2005

Audit Scope:
Security controls designed to protect the integrity and confidentiality of data stored on the state’s mainframe computers


Background:

The Office of Enterprise Technology (OET) is responsible for managing the central mainframe computing facility, which houses some of the state’s most important business systems and data. The complexity of the mainframe environment makes it difficult to secure. Thousands of software products run on the mainframe computers, any of which could affect security.

The 2005 Legislature created OET to provide technology leadership and oversight for state government. The new agency began operations on July 1, 2005, assuming the staff and resources of the Minnesota Office of Technology and the InterTechnologies Group, both former divisions of the Department of Administration. The Legislature placed OET under the direction of a Chief Information Officer, a cabinet-level position appointed by the Governor.

More Information

Office of the Legislative Auditor, Room 140, 658 Cedar St., St. Paul, MN 55155 : legislative.auditor@state.mn.us or 651‑296‑4708