IE11 Not Supported

For optimal browsing, we recommend Chrome, Firefox or Safari browsers.

2015 Year in Review No 10: Auditor’s Report Finds Significant Room for Improvement in State IT Security

With 2015 coming to a close, Techwire is counting down its Top 10 news stories of the year. Check back Monday, Dec. 28 and Tuesday, Dec. 29 as we unveil the people, projects and events that made news during the year gone by.

With 2015 coming to a close, Techwire is counting down its Top 10 news stories of the year. Check back Monday, Dec. 28 and Tuesday, Dec. 29 as we unveil the people, projects and events that made news during the year gone by.

Story No. 10: The California State Auditor released a report in late August detailing its audit of the California Department of Technology’s (CDT) oversight of the state’s information security. The report, titled High Risk Update—Information Security found that most reporting entities, including some that maintain sensitive or confidential information, have "poor controls over their information systems and are not fully compliant with the information security and privacy policies, standards, and procedures" set forth by CDT. According to the new report, only four of the 77 respondents to the Auditor’s survey stated that they had fully complied with all of the security standards. Many have not developed comprehensive inventories of their information assets and have not identified their information security risks. In addition, most reporting entities have not adequately planned for interruptions or disasters — only 23 of the 77 survey respondents stated they have fully met technology recovery plan requirements.


Read the full story here (Insider).