Skip to main content

An Audit Report on Confidential Data Management at the Office of the Comptroller of Public Accounts

February 2023


The Office of the Comptroller of Public Accounts (Office) implemented data loss prevention and certain other processes and controls to secure its confidential data. However, it should strengthen those processes and controls to help prevent unauthorized disclosure of its confidential data.

To minimize security risks, auditors communicated details about certain audit findings separately to the Office in writing. One finding was rated Priority because of issues that could critically affect the Office's ability to effectively administer its information security function. Immediate action should be taken to reduce the risk. One finding was rated High because the issues could substantially affect the Office's information security function; two other findings were rated Medium, indicating moderate risk. The Office's management agreed with the recommendations related to the audit findings.