DREAM / The Prime Minister resigns and wakes up under the Parisian bridge!

 Kliko këtu për të tjera
Voxpress:

Audit at the Albanian Post, departed employees still active for e-Albania services

2022-05-30 15:27:19Biznes SHKRUAR NGA REDAKSIA VOX
Audit at the Albanian Post, departed employees still active for e-Albania
Albanian Post

Information Technology systems in Posta Shqiptare sh.a show a number of weaknesses for which measures must be taken.

According to an audit conducted at the Post Office, another no less important finding is that for the provision of e-Albania services to citizens, employees have active users and this results for those employees who have left.

"In some cases, the same employee turns out to have more than two active users on the e-Albania portal. Also, there are employees who have terminated their employment relations with the Albanian Post and it turns out that they have active users for reading services from e-Albania, under the account of the company ", it is said in the audit conducted by KLSH.

The same audit notes that there is a mismatch between the data generated and those that result in a transaction for which a commission has been paid.

"According to the data generated by the e-Albania module for the Albanian Post, the number of prints from e-Albania is 198,585 documents that are thought to be and the number of transactions for which a commission has been collected. A total of 62,292 transactions emerge from the Eterna Financial system. Throughout 2019, subsidiaries have reported e-albania services as revenue in various items and throughout 2020 this service is identified as a business service despite the fact that the document can be withdrawn as a business or individual. This means that the economic directorate finds it almost impossible to record the number of records for which it has been collected, ”the audit explains.

The same concludes that the regulation on personal data protection, approved by the Supervisory Council of the company Posta Shqiptare Sh.a. with decision no. 43, dated 28.12.2015 and updated in 2019, which is still not approved, shows that the necessary measures have not been taken by the Albanian Post for the security of personal data as an obligation deriving from law no. 9887, dated 10.3.2008 "On the protection of personal data", Article 20 "Obligations of the processor", Article 21 "Responsibility to notify" and Article 27 "Measures for the security of personal data".

"This means that the employees of the Albanian Post are not informed that through e-Albania services they are working with personal data of citizens, which are protected by the law mentioned above," the audit estimates.

The report requested that the governing structures of Posta Shqiptare Sh.a take measures to find control mechanisms in the provision of services by e-Albania, which guarantee the registration of each printed document or its unique elements, in the internal system Eterna Financial in order to monitor and prevent misuse as a result of unauthorized access.

Also, the directorate of IT and Development, to analyze and take measures on users who have more than two active users on the e-Albania portal as well as users who have terminated their employment with the Albanian Post and turn out to have active users for reading services from e-Albania, in order to reduce the risk of unauthorized access and misuse of data.


Në përputhje me standarded JTI

Video

SHIKO KANALIN NE YOUTUBE
×