What we found

This section summarises our key findings. The numbered sections detail our complete findings, including supporting evidence.

When reaching our conclusions, we consulted with the audited agencies and considered their views. The agencies’ full responses are in Appendix A.

Cybersecurity of IT servers

Body
We plan to examine the effectiveness of agencies’ asset management in relation to the cloud environment and the effectiveness of controls associated with cloud-based infrastructure.