Review records or interview users to determine when passwords were last changed. In a department where an employee has recently terminated, determine if the employee's password has been deleted and if the passwords of other employees in the department have been changed. Determine how access to password tables is restricted. Determine if access is restricted to only those who really need to access the table. Determine if they are complete.
Review logs that record accesses.
Compare the logs to the list of authorized persons. Determine if access violations are being investigated in accordance with procedures. Effect of Weaknesses Access controls are designed to limit access to documentation, files, and programs. A weaknesses in or lack of such controls increases the opportunity for unauthorized modification to files and programs, as well as misuse of the computer hardware. However, weaknesses in systems software, program, and data security significantly decrease the integrity of the system.