The audit stated that the issues could “deprive users of reliable access to information and could risk unauthorized access to, or the alteration or destruction of, critical systems.”
Some of the other risks the audit found were devices on the health system’s network that were not listed in its inventory, no video surveillance at its data center, and inadequate fire detection and suppression equipment.
The health system was provided recommendations by the watchdog and said it would comply with them.
