Post Audit: About half of small state and local entities failed key IT security controls; committee holds executive session, approves audits

Alex Gard, principal IT auditor with the Legislative Post Audit division, told the Legislative Post Audit Committee that the two‑year summary of IT security work covering 15 audited entities shows mixed results: "the short answer is about half did and and half did not," he said, later adding that "7 of the 15 entities audited in the past 2 years did not substantially comply with applicable IT security standards and best practices."

The committee met in Room 546 South of the State House and first recessed into an executive session to discuss the IT security measures protecting the Board of Veterinary Examiners. Representative Sawyer moved that the open meeting be recessed for a closed executive meeting "pursuant to KSA 75 4 3 1 9 a to discuss matters relating to the security measures that protect the information systems of the Board of Veterinary Examiners," and the motion was seconded and adopted by voice vote. Chris (legislative staff) identified the people who could remain for that executive session, including…