Senate Asks If System Passwords Were Accessed or Changed at Immigration?

By
Updated: March 15, 2017

Rodolfo Bol, and his team were criticized by the Auditor General in regards to the passport systems. The report says that users were left in the system when it was not necessary. Bol explained how the system works.

ALDO SALAZAR

“Once somebody is entered into the user in the system and is assigned a user role in the system can they be deleted from the system?”

RODOLFO BOL

“The user itself? No they cannot be deleted.”

ALDO SALAZAR

“Okay because this something that I saw in the auditor general’s report that there was much made to some extent about the fact that users were not deleted out of the system.”

RODOLFO BOL

“Well users shouldn’t be deleted from the system because you are already a part of the system, you have done some data entry or something we have to keep that history of you as the user so we don’t delete users at any given point.”

MARK LIZARRAGA

“But can you make a user active or inactive?”

RODOLDO BOL

“That yes.”

MARK LIZARRAGA

“And when would you make a user inactive?”

RODOLFO BOL

“When I’ve been informed that the user is no longer working at that section, has been moved or has been transferred to a next department or whatever reason I only need to be informed about it.”

MARK LIZARRAGA

“Who would inform you of that?”

RODOLFO BOL

“Usually it would have been the director or the supervisor of that section who would inform me about it.”

MARK LIZARRAGA

“Was this the case, have you read the auditor general’s report?”

RODOLFO BOL

“Yeah I….

MARK LIZARRAGA

“Was this the case that she was referring to that maybe persons were on the system as active when they were no longer in those posts?”

RODOLFO BOL

“Yes there are different steps that we take when we are informed that a person is no longer in the system; one of the first steps we would do is change the password because passwords on the system they cannot be viewed. For example we cannot view the password for any user there we only see asterisks so that would be the first step that we would take, we would change the password so that the user can’t have access to the system.”

MARK LIZARRAGA

“But how could you change their password?”

RODOLFO BOL

“Because on the portal we have the option there to change passwords, because we have to create a password when the user is first created you have to create a password and you can use that same module to change the password for the user.”

MARK LIZARRAGA

“So you had the ability to change someone else’s password?”

RODOLFO BOL

“Yes as system administrators we have.”