IPPIS STILL BEING MANIPULATED BY OPERATORS- AUDIT REPORT

A performance audit that was conducted by Office of the Auditor-General of the Federation has revealed that operators of the federal government-owned Integrated Payroll and Personnel Information System (IPPIS) still have access to the backend of the platform that gives them the leeway to manipulate the system at will.

Former auditor-general of the Federation, Mr Ukura Tyonongo said the good intention of government for introducing the integrated payroll system has been defeated (while government is unaware) by the operators. “The intention of government was good but the operators messed it up,” the immediate past AuGF said in an exclusive chart with our correspondent. According to the specialised audit, “some contractors from Soft Alliance Ltd have access to the database and the ability to set up new users and to change live data and could not easily be identified.”

IPPIS is a unified platform for payment of salaries and wages directly to Government employees’ bank accounts with appropriate deductions and remittances.

The report showed that application controls have not been activated in IPPIS to ensure, for example, that: Gross pay is input from salary and allowance tables, rather than the actual amounts being input directly; completeness checks are not activated to ensure that all necessary data has been entered, for example, bank account number, grade level and job title and duplicate checks to check, for example, that bank account numbers or employee numbers are not used by more than one payee.

Reasonableness checks are not activated so that an officer of age less than 18 years or more than 60 years can still be paid,” the report said. “User profiles are not adequately restricted, so for example, an officer in one MDA can amend the payroll date for other MDAs.

A performance audit that was conducted by Office of the Auditor-General of the Federation has revealed that operators of the federal government-owned Integrated Payroll and Personnel Information System (IPPIS) still have access to the backend of the platform that gives them the leeway to manipulate the system at will.

Former auditor-general of the Federation, Mr Ukura Tyonongo said the good intention of government for introducing the integrated payroll system has been defeated (while government is unaware) by the operators. “The intention of government was good but the operators messed it up,” the immediate past AuGF said in an exclusive chart with our correspondent. According to the specialised audit, “some contractors from Soft Alliance Ltd have access to the database and the ability to set up new users and to change live data and could not easily be identified.”

IPPIS is a unified platform for payment of salaries and wages directly to Government employees’ bank accounts with appropriate deductions and remittances.

The report showed that application controls have not been activated in IPPIS to ensure, for example, that: Gross pay is input from salary and allowance tables, rather than the actual amounts being input directly; completeness checks are not activated to ensure that all necessary data has been entered, for example, bank account number, grade level and job title and duplicate checks to check, for example, that bank account numbers or employee numbers are not used by more than one payee.

“Reasonableness checks are not activated so that an officer of age less than 18 years or more than 60 years can still be paid,” the report said. “User profiles are not adequately restricted, so for example, an officer in one MDA can amend the payroll date for other MDAs.

“The ability to create new users on the system is not adequately protected and restricted to a few, ‘Super users’. Changes to date of birth and date of first appointment are not adequately controlled.”

As a result of these deficiencies in the controls, the audit identified series of potential overpayments. In the first case, it discovered that nearly 300,000 payments totaling N330 million where the gross pay differed from approved salary scale, with double payments of nearly N30 million in September – December, 2011.

The audit report that was obtained from the website of the AuGF by our correspondent claimed that the password controls for access to IPPIS are not adequate. “This is important as access can be undertaken remotely via the internet.”

The findings of the AuGF audit showed that passwords do not expire after 90 days, so officers could use their password after leaving the service; some user names and passwords were shared by several users; users cannot necessarily be adequately identified as the user name is just “Consultant” or “Technical”; there is no restriction on the number of sign-on attempts and there is no minimum password length.
“The audit trail for IPPIS has not been enabled. As a result, it is not always possible to trace which user made particular inputs or changes (for example fraudulent transactions cannot be traced to a particular user). Detailed analysis of the report revealed that 40 payees were paid a total of over N12 million each month, but were not included in the nominal role of the relevant MDA

https://leadership.ng/2020/02/07/ippis-operators-manipulating-platform-audit-report/

 

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.