Manitoba government’s cloud service controls don’t adequately deal with security risk, auditor general says | CBC News


Manitoba government’s cloud service controls don’t adequately deal with security risk, auditor general says | CBC News

Listen to this article

Estimated 1 minute

The audio version of this article is generated by AI-based technology. Mispronunciations can occur. We are working with our partners to continually review and improve the results.

Manitoba’s auditor general is calling for better oversight of child care and cloud computing, under two separate audits.

Tyson Shtykalo says government departments lack clear direction on when to use cloud services — which can store sensitive information online under services run by third parties — and what requirements apply.

The province has established management processes for cloud service providers, but the controls do not adequately mitigate security risks, he said.

The audit report, released Thursday, said two cloud service providers had no documentation verifying that vendors met some data and technical requirements, leaving the province vulnerable to security breaches.

In the second audit report released Thursday, Shtykalo said Manitoba is unlikely to meet its target of 23,000 new child-care spaces, and the department did not verify expenses claimed by centres for grants to expand diversity and inclusion.

The government has accepted recommendations in both reports and said work is underway to boost child-care access.