Internal Management Deficiencies
(1) The user authorization for Accounting System (Equation System) was inappropriately assigned. It was inconsistent with user's duties and responsibilities. For example, H. Su (user ID: THYS), the Head of Human Resource Department, had the access right to inquire customers' accounting information.
Opinion: The Branch should review the appropriateness of the assigned user authorization for each system.