Information Technology Audit Report on the Disposal of ICT Equipment of Select Public Entities – Ministry of Science, Energy and Technology, eGov Jamaica Limited and Post & Telecommunications Department
Scheduled Publication
Information and Communications Technology (ICT) equipment is increasingly being utilized by Ministries, Departments and Agencies (MDAs) in their daily operations resulting in an increasing build-up of inventory. Sensitive data stored on these devices must be appropriately secured or destroyed prior to their disposal. Despite this increased reliance on technology and the eventual disposal of ICT devices that have reached the end of their useful life, there is not yet any clear government policy regarding the secure disposal of ICT equipment to prevent the unauthorized disclosure of confidential information stored on these devices.
I commissioned an IT audit of three MDAs, namely the Ministry of Science, Energy and Technology (MSET), eGov Jamaica Limited (eGovJa) and the Post and Telecommunications Department (PTD) to determine whether the entities had implemented adequate controls to preserve the confidentiality of information prior to the disposal of ICT equipment and related storage media. The audit revealed that all three entities had a high risk of unauthorized disclosure of confidential information because their control systems were inadequate to ensure that sensitive information was safeguarded before the disposal of their ICT equipment. Steps need to be taken to strengthen their control systems to ensure that confidential information is preserved and proper records are maintained as evidence of the media sanitization undertaken.
This report is intended to assist all three entities to enhance their IT control systems in order to reduce the likelihood and or impact of IT security risks on their operations. It is therefore crucial that the management of MSET, eGovJa and PTD carefully review the recommendations contained in this report with a view to strengthening their control systems by adopting the measures outlined.
I wish to thank the management and staff of MSET, eGovJa and PTD for the courtesies extended to my staff during the audit.
LinkedIn
Twitter
Youtube
