FRAS General Controls

Pursuant to a congressional request, GAO reviewed the general controls over the Federal Reserve Automation Services' (FRAS) computerized financial information systems. GAO noted that: (1) FRAS staff have modified system security software to limit access to Integrated Accounting System data, reduced the number of authorized personnel in the FRAS computer center, and developed new procedures for granting physical access to the center; (2) FRAS has developed guidelines to ensure that system software changes are independently tested and certified prior to implementation; and (3) although corrective actions have been completed for most general control weaknesses, FRAS needs to fully test its disaster recovery plan and review the started-task program with special privilege authority.