ALN: 14.195, 14.856, 14.871, 14.879,
Corrective Action Plan: Inadequate Baseline Security Controls - Housing Assistance Payment System - DOC - The Montana Department of Commerce has updated password requirements to comply with statewide policies. The passwords are now sent through encrypted emails...
ALN: 14.195, 14.856, 14.871, 14.879,
Corrective Action Plan: Inadequate Baseline Security Controls - Housing Assistance Payment System - DOC - The Montana Department of Commerce has updated password requirements to comply with statewide policies. The passwords are now sent through encrypted emails and users are required to change their passwords upon initial login. The department has also developed a process to conduct and document access reviews. Additionally, the department has developed a change control policy to address roles, responsibilities, and configuration management processes as well as procedures to adequately document the department’s understanding of change impact to the system. The department has provided training and support to the backup user access manager.
Person(s) Responsible for Corrective Measures:
Ingrid Mallo,
Chief Financial Officer,
Montana Department of Commerce,
Target Date: 06/24/2024