Audit observed from the review of the database logs from Jan 2019 – Dec 2020 that:
i. GIFMIS project management does not have a Change Management Policy or documented procedures to ensure changes are duly implemented
ii.There was no governing structure or management’s committee responsible for changes within the GIFMIS system and infrastructures.
iii.There were over 20 command/statements such as “ALTER”, “DELETE”, “INSERT” found in the data logs extracted from the database which stores All transactions made and processed on the GIFMIS. These commands are used to effect major changes or delete data/information from the Database tables.
iv. There were no documentations, or approvals for these changes. With this, audit could not ascertain the changes made, the reasons they were made and by whom.