They see lags in cyberspace security

The Superior Audit of the Federation (ASF) warned in the second report of the Public Account of 2022 of the risks that Mexico has in terms of cybersecurity.

The ASF considers that controls in this matter were strengthened in Banjercito, Nafinsa and the SHCP, managing to go from a low to a medium range.

However, the level of protection is dynamic and permanent in the face of cyber threats,” it is indicated.

ASF carried out reviews on the Secretariat of Infrastructure, Communications and Transportation and Conagua; reviewed the management carried out during the cyberattacks that occurred and issued recommendations to strengthen its controls in the face of these events.

It should be remembered that in 2022 it was announced that the emails of personnel from the Ministry of National Defense, including the institution's senior officers, were hacked. What happened then reported a high digital vulnerability.

Safety recommendations are diverse.

Policies, processes, procedures and controls must be strengthened in the functions of identification, protection, detection and response of cybersecurity in electronic banking to ensure the integrity, confidentiality and availability of banking transactions," it is indicated for the case of Nacional Financiera.

In the section of the Ministry of Infrastructure and Communications and Transportation, the ASF emphasizes that “there are deficiencies in the administration and operation of cybersecurity controls, which could affect the integrity, availability and confidentiality of the information, putting the operation at risk. of the secretariat.”

WE RECOMMEND YOU: They call to regulate cyberspace in Mexico

In this regard, it is stated that "deficiencies were identified in the administration and operation of the 18 Cybersecurity controls for the hardware and software infrastructure of the secretariat, since 5 controls need to be strengthened, 12 lack control and 1 has a level acceptable; The foregoing could affect the integrity, availability and confidentiality of the information, and put the operation of the SICT at risk.”

Likewise, in the case of the Ministry of Economy, the ASF warns that “there are deficiencies in the administration and operation of cybersecurity controls, which could affect the integrity, availability and confidentiality of the information, putting the operation of the entity at risk. Secretary".

UNIVERSITIES, WITH IRREGULARITIES

The Superior Audit of the Federation detected amounts to be clarified by the Autonomous University of Oaxaca, Chiapas, Chihuahua and Coahuila.

In the case of Oaxaca, for example, the Audit presumes, among other irregularities, probable damage in the amount of 365,333 pesos, for making payments after the date of sick leave due to the death of 6 workers.

In total, of the resources that the SEP transferred to the Autonomous University of Oaxaca, it did not commit 11.9 million pesos and did not pay 7,370.0 thousand pesos, which represented 0.6% of the transferred resources.

In the exercise of the resources, the Benito Juárez Autonomous University of Oaxaca violated the regulations, mainly in matters of Registration and Financial Information of Operations, Leases and Services, which generated probable damage to the Federal Public Treasury in the amount of 5,443.1 thousands of pesos, which represent 0.4% of the audited sample,” he indicates.

In this context, the ASF ruled that the University of Oaxaca does not have an internal control system to prevent risks that could limit the fulfillment of the objectives, the observance of its regulations and the orderly, efficient and transparent management of resources.

The Benito Juárez Autonomous University of Oaxaca violated the regulations. Photo: Special

In the case of the Autonomous University of Chihuahua, the ASF reports that it incurred non-compliance with the regulations, mainly in terms of personal services, which generated probable damage to the Federal Public Treasury for an amount of 26,861.1 thousand pesos, which represents the 2.6% of the audited sample.

While in the exercise of resources, the Autonomous University of Chiapas violated the regulations, which generated probable damage to the Federal Public Treasury for 102,430.7 thousand pesos, which represented 6.1% of the audited sample.

And finally, in the case of the Autonomous University of Coahuila, it concluded that it also violated the regulations, mainly regarding the Federal Budget Law, which generated probable damage to the Federal Public Treasury for an amount of 613,255.9 thousand pesos, which represented 29.5% of the audited sample.

- Laura Toribio

SEDENA MUST CLARIFY $14 MILLION

The Superior Audit of the Federation found probable damages to the treasury of 14.6 million pesos in four works carried out by the Secretariat of National Defense.

This is the adaptation of the Regional Military Hospital of Irapuato, in the state of Guanajuato; the construction of a Children's Rehabilitation Center (CRI) with Equine Therapy in Mérida, Yucatán; another in Puebla, and the construction of the Sedena Sports Center at the UHM Chihuahua, in Mexico City.

In the construction of the CRI in Yucatán, six million pesos were determined pending clarification, since excess payments were detected due to the fact that the volume occupied by the reinforcing steel in the reinforced concrete structural elements was not discounted, as well as by volumes of work estimated and paid.

THE NAVY MUST CLARIFY $69 MILLION

In the second installment of the review of the 2022 Public Account, the Superior Audit of the Federation found anomalies in infrastructure projects of the Administration of the National Port System in Salina Cruz, Oaxaca; Pajaritos Lagoon, Stage 2, in Veracruz; Lázaro Cárdenas, Michoacán; Manzanillo, Colima, and Mazatlán, Sinaloa.

Due to these probable irregularities, the Secretary of the Navy, the agency in charge, must clarify the use of 69.3 million pesos.

The Audit detected excess payments of 64.7 million pesos and 4.5 million pesos of improper payments.

Given the anomalies detected in projects of the Administration of the Manzanillo National Port System, three promotions of administrative sanctioning responsibility were carried out, while in the rest, the unresolved observations resulted in sheets of observations.

cva