In addition, the same program analysts were responsible for system development management, which included the migration of programs to the production environment.
Furthermore, the Lawson program analysts had direct access to the production database by way of a generic database administrator username and password and therefore had full access to the audit trails.
The Fund secretariat informed the Board that given the small size and composition of its technical teams, it was not always possible to remove production access of program analysts as they frequently played the role of developer and tester.
The Board noted that the program analysts had direct access to the Lawson and PENSYS production environments and production source codes.
审计委员会注意到,程序分析员可直接进出劳森系统和养养恤基金管理系统的生产环境和存取生产源代码。
The risks created by this level of access were compounded by the fact that the access of the program analysts was not formally monitored or reviewed by an independent section, for example, a quality assurance component.
The Fund secretariat agreed with the Board's recommendation to review the appropriateness of the access rights of the program analysts with a specific focus on access to the production environment, and to set procedures to manage instances where such access to the production environment was required.
Os exemplos servem apenas como ajuda na tradução da palavra ou da expressão procurada. Eles não são selecionados ou validados por nós e podem conter linguagem inapropriada. Pedimos que reporte exemplos que devem ser modificados ou que não devem ser exibidos. As traduções potencialmente sensivéis, impróprias ou coloquiais geralmente são marcadas em vermelho ou em laranja.