RICHMOND, Va. (WRIC) -- Sensitive data kept by the Virginia Office of the Attorney General may be at risk due to confusion between its oversight committee and providers, per a recent audit.
The report was conducted in Fiscal Year (FY) 2024 and states that the Attorney General's office has made progress since prior reviews. However, weaknesses still exist within three areas of the office.
The Auditor of Public Accounts (APA) said improvements should be made to increase the safety and protection of sensitive data.
Continue to improve Virtual Private Network Security Controls
According to the audit report, in the area of "Virtual Private Network Security Controls," the office has made progress since FY2019 by "implementing multi-factor authentication for remote sessions through the virtua