EUROSAI IT Working Group Parallel Audit on Biometric Passports
Report ID: 261
At the 8th Meeting of the EUROSAI IT Working Group (ITWG), held in Paris, France, in 2013, the SAIs of Switzerland (Audit coordinator), Portugal, Belgium, Latvia, Lithuania and Norway, decided to carry out Parallel Audit on Biometric Passports
The objective of the audit was to assess whether adequate management and control processes are in place relating to the biometric passport production process. Within the primary objective, auditors were expected to ascertain whether the process to obtain a reliable and secure biometric passport is well defined and properly implemented.
The main goal of this audit was to validate the following areas with regard to the production process, including the risk mitigation aspect: Benefit realisation, Security, Effectiveness and efficiency
The evaluation of the reported results showed that the overall passport process is generally under control while a couple of high-risk findings were identified in the non-process-specific assessments. In the non-process-specific assessments, most of the countries found deficiencies and weaknesses related to the IS/IT system and the IT management. Medium risks have been identified in the area of laws and regulations, cost-benefit realisation and transparency, as well as in security regulations relating to internal and external personnel.
Source: https://www.vkontrole.lt/en/docs/booklet-parallel-audit-on-biometricpassports.pdf