The Utah state auditor's office has released a report noting issues with unlicensed individuals accessing the state's controlled substance database, including those with expired licenses. The audit also found inadequate password requirements, inadequate monitoring if user activity, and issues with data retention policies. The audit report noted that the Department of Professional Licensing quickly fixed a bug related to the system's verification of license and intends to adopt all of the recommendations from the report.
February 20, 2019
