In addition, the same program analysts were responsible for system development management, which included the migration of programs to the production environment.
Furthermore, the Lawson program analysts had direct access to the production database by way of a generic database administrator username and password and therefore had full access to the audit trails.
The Fund secretariat informed the Board that given the small size and composition of its technical teams, it was not always possible to remove production access of program analysts as they frequently played the role of developer and tester.
The Board noted that the program analysts had direct access to the Lawson and PENSYS production environments and production source codes.
审计委员会注意到,程序分析员可直接进出劳森系统和养养恤基金管理系统的生产环境和存取生产源代码。
The risks created by this level of access were compounded by the fact that the access of the program analysts was not formally monitored or reviewed by an independent section, for example, a quality assurance component.
The Fund secretariat agreed with the Board's recommendation to review the appropriateness of the access rights of the program analysts with a specific focus on access to the production environment, and to set procedures to manage instances where such access to the production environment was required.
Examples are used only to help you translate the word or expression searched in various contexts. They are not selected or validated by us and can contain inappropriate terms or ideas. Please report examples to be edited or not to be displayed. Potentially sensitive, inappropriate or colloquial translations are usually marked in red or in orange.