GAO said Thursday that the study conducted on FDIC showed the agency had vulnerabilities on the third-party softwares that supported its financial processing and lacked a process to rectify user access rights to its financial processing systems.
The agency recommended the FDIC’s chief information officer implement access control procedures that require the authorization of access rights modifications to be documented and a policy that will work to identify monitoring changes to critical files to be included during the audit.
FDIC has concurred with GAO’s recommendations to apply the new recommendations.