Press Release  Auditor Bump Provides Recommendations to Strengthen MassHousing’s IT Infrastructure

Boston — Auditor Suzanne M. Bump called on the Massachusetts Housing Finance Authority to strengthen the security of its IT infrastructure, and provided recommendations on how to do so in an audit released today. The audit was the first in a series conducted by Bump’s office that will look at information technology infrastructure and cyber security of state agencies.

“Technology plays an ever increasing role in the work of government. State agencies must keep up with the pace of innovation and the increasing threat to their physical assets and data. Recognizing this need, my office is expanding our efforts to provide our insight and expertise to agencies to improve cyber security in state government,” Bump said of the audit. “As a result of our audit, MassHousing has already begun to take action to address the problems identified.”

The audit, which examined activities of MassHousing from July 1, 2014 through December 31, 2015, found deficiencies in the areas of governance, oversight of contractors, IT inventory, protection of confidential information, and procedures for backing-up information.

To rectify the deficiencies identified, Bump recommended MassHousing conduct a data inventory, and develop a classification scheme to identify sensitive information. She also called on the Authority to revisit its contract with the provider of disaster-recovery services to ensure it is up-to-date and adequate. Additionally, she called on MassHousing to establish and implement policies to ensure all employees are trained on its security procedures.

MassHousing indicated that it has already taken steps to address some of the deficiencies identified in the audit.

The audit released to the public is abridged because of the sensitivity of the information contained in the full audit. Consistent with government auditing standards and the Massachusetts public records law, only the Massachusetts Housing Finance Authority will receive a full, unabridged copy of the report.

MassHousing is an independent, quasi-public agency charged with increasing affordable rental and for-sale housing in Massachusetts. It is governed by a nine-member board of directors, and does not receive state funding for its operations.

The MassHousing audit is available here.

###