About | HeinOnline Law Journal Library | HeinOnline Law Journal Library | HeinOnline

LOG IN
LOG IN


AFMD-82-120 1 (1982-09-28)

handle is hein.gao/gaobabmpl0001 and id is 1 raw text is: COMPTROLLER GENERAL OF THE UNITED STATES . WASHINGTON D.C. 20548 B- 115349 September 28, 1982 The Honorable Nunzio J. Pallidino III 1111111111111 Chairman 119565 Nuclear Regulatory Commission Dear Mr. Chairman: Subject: Approval of the Nuclear Regulatory Commission Payroll System (GAO/AFMD-82-120) It is my pleasure to approve the Nuclear Regulatory Com- mission Payroll system as requested by Mr. Learned Barry's letter dated July 15, 1982. The design, and its implementation, are adequate and in conformity with our prescribed principles and standards for pay, leave, and allowances of civilian personnel. In evaluating the system and testing its operation, we examined the manual and automated aspects to determine their consistency with accounting and payroll requirements, and the existence and adequacy of (1) user documentation; (2) the inter- nal controls related to the authorization, approval, processing, and reporting of events which affect entitlements; (3) audit trails; and (4) data integrity. The integrity of an on-line system such as the Commission's ultimately rests with the establishment and maintenance of an effective system of access control. We found that the Commission has established a reliable system of passwords by which to accom- plish this. We urge that strict management oversight be main- tained in this critical area because if the controls over system access become lax, the integrity of the data residing in the data base is compromised. To maintain the approved status of the system, planned changes should be discussed with our representatives and, if deemed significant, submitted formally for approval. We suggest ,that the Commission's internal auditors period- ically review the system in operation to assure that it is in accordance with the approval. At some future date we will again examine selected aspects of the system and advise you as to whether it is functioning effectively and in accordance with the approval. (931128)