In recent findings that regard the ongoing struggles with digital security, an audit of the City's Identity and Access Management (IAM) systems, conducted by Protiviti and facilitated by the City Auditor’s Office, has revealed, significant shortcomings in its ability to protect digital identities and access protocols. According to a report released by the City of Scottsdale, the audit identified a range of issues from critical to low priority, in need of immediate attention. Protiviti's assessment, laid bare the vulnerabilities, revealing overt risks in the current IAM architecture.
Among the pressing issues flagged by investigators were an overabundance of privileged accounts that seem to lack proper oversight, and a patchy deployment of multi-factor authentication – a key line of defense in safeguarding data.
The audit, which plays a crucial part in ensuring that only authorized eyes gain access to sensitive information, noted, that such lapses could potentially lead to unauthorized access and misuse of city data. Other findings highlighted the necessity for comprehensive user access policies, upgrade system monitoring, and improvement of processes that govern how user access is given, altered, or revoked, as per the City of Scottdale.
