<\/p>\n
Auditor-General (A-G) Tsakani Maluleke has found that Passenger Rail Services of SA (Prasa) lost more than R30 million through a cybersecurity attack and theft by an employee in the 2022\/23 financial year.<\/p>\n
\u201cA R14.8 million loss was incurred as a result of a cybersecurity attack.<\/p>\n
R21.2 million was embezzled by an employee of the organisation who was subsequently dismissed,\u201d Maluleke said.<\/p>\n
Prasa had procured the services of an independent digital forensic service provider to assist with an investigation into alleged fraudulent activity following the alleged cyber breach during the financial year under review, she said.<\/p>\n
\u201cThis investigation was concluded on May 31, 2023 and pointed to critical weaknesses in the Prasa cybersecurity environment.<\/p>\n
\u201cManagement is in the process of addressing the findings of the report as part of its ITC project plan, to be fully implemented by March 31, 2024.\u201d<\/p>\n
In her qualified audit report, Maluleke said Prasa has inadequate and insufficient controls over information security management and information technology systems. It was necessary to ensure the reliability of the systems and the availability, accuracy and protection of information relating to user access management, programme change control and IT service continuity.<\/p>\n
Maluleke also found that Prasa did not take effective and appropriate steps to prevent irregular expenditure totalling more than R4m.<\/p>\n
\u201cThe majority of the irregular expenditure was caused by non-compliance with laws and regulations pertaining to procurement and contract management.\u201d<\/p>\n
Effective steps were not taken to prevent fruitless and wasteful expenditure, she said.<\/p>\n
Maluleke added that particulars of irregular, fruitless and wasteful expenditure balances included in the annual report were materially inconsistent with audit evidence obtained during the audit.<\/p>\n
\u201cThis is due to Prasa not having revisited the irregular and fruitless and wasteful expenditure incurred in financial years prior to March 31, 2021, to ensure the completeness thereof, in light of previous audit qualifications stretching as far back as the financial year ended March 31, 2017.\u201d<\/p>\n
Maluleke said she was unable to obtain sufficient appropriate audit evidence that disciplinary steps were taken against officials who had incurred irregular expenditure or fruitless and wasteful expenditure.<\/p>\n
However, in its annual report, Prasa revealed that it identified that one of its employees embezzled R34.5m of which R9.5m was returned by the employee last October.<\/p>\n
\u201cThe remaining total loss to be recovered is R24.9 million of which R21.2 million (included in note 42 for the current year) and R3.7 million relates to the 2022\/23 and 2023\/24 financial years respectively.<\/p>\n
\u201cA criminal case and criminal proceedings are instituted against the employee to recover the proceeds of crime,\u201d reads the annual report.<\/p>\n
Prasa said the employee was dismissed after a disciplinary hearing and an urgent application to freeze the assets of the dismissed employee was also lodged.<\/p>\n
Maluleke noted with concern that Prasa\u2019s financial statements were not submitted for auditing within the prescribed period after the end of financial year, as required by the Public Finance Management Act.<\/p>\n
Cape Times<\/strong><\/p>\n","protected":false},"excerpt":{"rendered":" Auditor-General (A-G) Tsakani Maluleke has found that Passenger Rail Services of SA (Prasa) lost more than R30 million through a cybersecurity attack and theft by an employee in the 2022\/23 financial year. \u201cA R14.8 million loss was incurred as a result of a cybersecurity attack. R21.2 million was embezzled by an employee of the organisation […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[18],"tags":[16041,1842,11255,16040,1160],"class_list":["post-208042","post","type-post","status-publish","format-standard","category-politics","tag-cyberattack","tag-lost","tag-prasa","tag-r30m","tag-theft"],"yoast_head":"\n