UNCA information systems audit highlights deficiencies

A recent audit of UNC Asheville’s information systems by the state auditor’s office found a number of deficiencies. Most don’t sound critical, but taken together, it appears that there’s some work to be done. In fact, some of that work has already been done, according to UNCA’s responses.

Here are a few findings, and UNCA’s response:

Recommendation: UNCA’s management should develop a written set of long-term and short-term plans to adequately anticipate and address challenges and opportunities as they arise. 

Auditee’s Response: UNC Asheville concurs with the finding and will consolidate existing planning documents into a single document and make significant progress in refreshing the plan during the next three months. 

 

Recommendation: UNCA’s management should obtain anti-virus software for all of its computing resources and install it immediately. 

Auditee’s Response: UNC Asheville concurs with the finding and ITS personnel have installed anti-virus software on the systems which were indicated by the audit. This finding is resolved. 

 

Recommendation: UNCA’s management should develop a process that gives the IT department the authority to set standards and guidelines for the types of information that can be posted on the webpage. Management should then communicate these policies and procedures to all faculty, student, and staff. The IT department should periodically scan the university web pages for compliance with the standards. 

Auditee’s Response: UNC Asheville concurs with the finding and will consolidate existing usage and data management policies into a set of standards and guidelines which web developers must use in publishing information on UNC Asheville web pages. 

 Click here to read the full audit.