1. 22 – 24 October, Seoul, South Korea SAI Fiji Experience Coordinated Parallel Audit of Public Debt Management Information Systems MINISTRY OF FINANCE DEBT UNIT – FIJI

2. 22 – 24 October, Seoul, South Korea Introduction  Fiji agreed to be part of the coordinated parallel audit  Debt recording – Debt Unit (Finance)  Overseas; Reserve Bank of Fiji  Domestic Loan)  Ministry of Finance – Debt Unit uses the debt recording software – CS - DRMS

3. 22 – 24 October, Seoul, South Korea Introduction  Presentation on 3 areas of discussion topics (i) IT System & General Management; (ii) Security & Environment Control; (iii) Operational control & Documentation

4. 22 – 24 October, Seoul, South Korea Background  CS-DRMS was launched in 2001;  Used for monitoring and managing the debt portfolio of the Country including the debt.

5. 22 – 24 October, Seoul, South Korea Audit Objectives  Audit objectives are to assess whether: management and control processes of Debt Management Information System are in place information system has adequate general and application controls

6. 15-17 April 2014, Chisinau, Moldova IT System Strategy & General Management   No Technical Assistance to Debt recording software;  Impact  System upgrade and technical support not forthcoming;  Back up – Government ITC Data Centre - Off site.

7. 15-17 April 2014, Chisinau, Moldova IT System Strategy & General Management  No internal audit carried out by Ministry Internal Audit;  No development of infrastructure since 2006  Last training held – 2010

8. 22 – 24 October, Seoul, South Korea Security & Environment Control  Server files are well secured and access is granted only to System Programmer;  From February 2014 ; a new server was used at ITC data center (external site) where data is backed up weekly from the server - Debt Office

9. 22 – 24 October, Seoul, South Korea Operational Control & Documentation  Business Continuity Plan not in place;  Absence of Service level agreement;  Training of Technical Staff not regular  Current IT personnel do not have formal training for CS-DRMS  3 officers – CS-DRMS

10. 22 – 24 October, Seoul, South Korea Application Control  Paid off loans accounts still appearing in system and not deactivated;  Absence of technical reason, audit was not able to sight and test the input screen for updating foreign exchange information such as rates, currency codes, fees due to the cautious approach of the Ministry Debt Unit

11. 22 – 24 October, Seoul, South Korea Summary  Data Security – Back up Daily and now on off site location.  No Internal Audit by Ministry of Finance Internal Audit Division;

12. 22 – 24 October, Seoul, South Korea THANK YOU