Council cybersecurity concerns as almost fifty ex-staff had access to Cheshire East finances

By Belinda Ryan - Local Democracy Reporter

14th Mar 2023 | Local News

Do you care about the cybersecurity of Cheshire East Council? (Image by Darwin Laganzon from Pixabay)
Do you care about the cybersecurity of Cheshire East Council? (Image by Darwin Laganzon from Pixabay)

Forty six people still had computer access to Cheshire East's financial system after they had left the council's employment, an auditor's report has revealed.

Mazar's, the council's external auditors, identified 46 users that retained general ledger systems access after their leave date.

They highlighted this as a 'level one significant deficiency in internal control' in the external audit report which went to Thursday's meeting of the council's audit and governance committee.

Level one is considered by the auditor to have 'potential for financial loss, damage to reputation or loss of information'.

At the meeting Ron Jones, who is a co-opted independent member of the committee, asked: "Does this include internal transfers as distinct to leavers? The point being, if there's internal financial authority and someone moves to a different section and retains that authority."

Mark Dalton, of Mazar's, said: "We do know that the council and management have been doing a large number of work in relation to those 46 individuals to get their own assurance as to whether those individuals have actually inappropriately accessed the systems after they left, and I'm pleased to be able to report to the committee that that's not the case."

With regard to how they had remained on the system, Mr Dalton said he understood, from the council's initial work, that a number of those individuals were management consultants who had continued to have some kind of support role as the new system was rolled out.

No reference was made during the meeting as to why others had remained on the system.

Mr Jones also picked up on a lower, level two deficiency, where a new worker had been granted access to a system prior to approval of the access request.

A Cheshire East officer told the committee: "They have assured us they have tightened their procedures to ensure that, in all new requests to access the system, line manager approval is obtained."

But Mr Jones sought assurance from the external auditor that there was a control in place to make sure those processes are carried out and he was happy with it.

Mr Dalton replied: "We are assured that management have accepted the improvement opportunity and they're on with that but, as our report states, that remains a control deficiency as things stand and we'll only clear it as part of our 22/23 audit."

The cybersecurity concerns come one year to the month after it was revealed Cheshire East websites received 'a huge increase of activity in Russia'.

Advertise your Macclesfield event for FREE on our What's On page.

Macclesfield: Have you signed up for our FREE Friday weekly newsletter? It contains each week's top five Macclesfield news stories, plus one EXCLUSIVE article?

Simply enter your email address on this link.

Free from pop-up ads, or unwanted surveys, Macclesfield Nub News is a quality online newspaper for Macclesfield and the surrounding area.

You can find us on Facebook and Twitter

     

New macclesfield Jobs Section Launched!!
Vacancies updated hourly!!
Click here: macclesfield jobs

Share:

Related Articles

A High Peak bus bound for Macclesfield. (Image - Macclesfield Nub News)
Local News

Macclesfield: Cheshire East Council trying to encourage bus usage as 'valid alternative' to driving cars

Cllr Craig Browne announced his resignation as deputy leader of Cheshire East Council in December 2023.
Local News

Ex-Deputy Leader of Cheshire East Council slams children's and adults' services over spending

Sign-Up for our FREE Newsletter

We want to provide macclesfield with more and more clickbait-free local news.
To do that, we need a loyal newsletter following.
Help us survive and sign up to our FREE weekly newsletter.

Already subscribed? Thank you. Just press X or click here.
We won't pass your details on to anyone else.
By clicking the Subscribe button you agree to our Privacy Policy.