Audit and Evaluation - HRMIS Personnel Security Data Audit Final Report

HRMIS Personnel Security Data Audit Final Report
November 2005
Internal Audit, Evaluation and Review

Executive Summary

The Human Resources Management Information System (HRMIS) Personnel Security Data Audit was precipitated by findings of the Canada Customs and Revenue Agency/ Royal Canadian Mounted Police Memoranda of Understanding Audit conducted by Audit and Evaluation which noted issues concerning the personnel security data contained in HRMIS.

The focus of the audit was on the RCMP activities to limit access to information and assets to those individuals who have the appropriate security screening level. The objectives were to provide assurance on:

• the accuracy of the security clearance and position security information contained in the HRMIS, and
• the adequacy and effectiveness of controls in place supporting compliance with the Government Security Policy.

The audit concluded the following:

• The audit found that the information related to the security clearances and position security levels contained in HRMIS are neither accurate nor complete. These data integrity issues put the organization at risk of placing persons in positions and affording them access to our buildings, information, and assets, without the appropriate security clearance.
• An appropriate and effective control framework for personnel security is not in place. The audit determined that roles and responsibilities are not clearly defined and understood, procedures are not adequate to support compliance with the Government Security Policy and adequate monitoring is not carried out to protect the RCMP against unauthorized access to its information and assets.
• These control weaknesses have resulted in a large number of employees, in particular regular members, with security clearances that are lower than that required by their positions, and a large number of security clearances that need to be updated.
• As a result , the RCMP is not fully compliant with the Government Security Policy with regard to access limitations and security clearances.

To read Adobe Acrobat files, you may need to download and install the free Adobe Reader available from Adobe Systems Incorporated

To obtain an electronic copy of the complete report (PDF) or if you would like to receive this report in an alternate format, please send a request by e-mail to the Audit and Evaluation section of the RCMP: