Audit shows unresolved IT issues in govt

More than half of the IT issues identified in the previous financial year’s audit remain unresolved, the Office of the Auditor General reported.

Acting auditor general Sandra Labuschagne today tabled the 16^th Information Systems Audit – State Government Entities report in state parliament.

The report covers the 2022-23 audit of information systems for Western Australian government entities and tertiary institutions.

In the report, the Office of the Auditor General found 55 per cent of IT weaknesses across 58 state government entities were unresolved issues from previous years.

Ms Labuschagne said the sector demonstrated commendable efforts to decrease general computer control weaknesses.

However, Ms Labuschagne said state government entities needed to act quicker to address the issues.

“Entities need to act more quickly to address known issues. It is crucial that entities address these long-standing audit findings to improve their information and cyber security controls,” she said.

“This will protect the confidentiality, integrity and availability of key business systems for WA public sector entities that deliver important services to the public.

“Last year, significant information and cyber security weaknesses resulted in 13 entities receiving qualified financial audit controls opinions.

“This year, we found a number of those entities had addressed significant issues, resulting in fewer qualified controls opinions.”

Endpoint security was identified as the weakest area with only 11 per cent of the entities meeting the benchmark, according to the report.

“The poorest results were found in endpoint security, access management and human resource security,” Ms Labuschagne said.

“Weaknesses in these areas leave entities more exposed to potential attacks that could compromise their information and operations.”