County Auditor Releases Public Records Application Identity and Access Management Audit

Washington County Auditor Kristine Adams-Wannberg issued her Identity and Access Management Audit of the County’s public records application. This computer application manages intake of public records requests, gathering and review of information, and release of information, among other things. Data stored in the application contains sensitive information.

Adams-Wannberg said, “Public access to information is a cornerstone of accountability, and so is protecting sensitive data. When systems allow more access than necessary, the risk isn’t theoretical. It increases the chance of misuse, exposure, or error. This audit found that those risks exist today and addressing them should be a priority.”

The report made 17 recommendations for improvement. Management agreed with most of the recommendations.