Audit: Oregon still struggles with cyber security needs

SALEM — Auditors say Oregon’s central administrative agency lacks basic controls to protect its information and systems from a cyber attack.

That means the Department of Administrative Services’ information and systems are at risk for “unauthorized use, disclosure, or modification,” according to a report released Wednesday, July 3, by Secretary of State Bev Clarno.

Auditors used six criteria from the Center for Internet Security to evaluate the agency’s basic security controls.

“The security of Oregon’s…