Report #2007-P-00017, March 29, 2007
What Was Found
We discovered weaknesses in how EPA offices (1) monitor databases for known security vulnerabilities, (2) communicate the status of critical system patches, and (3) monitor the use of and access to database administrator accounts and privileges.