Filing excerpt
we did not design and maintain effective controls over IT general controls for information systems that are relevant to the preparation of the consolidated financial statements. Specifically, we did not design and maintain: (i) program change management controls for financial systems to ensure that IT program and data changes affecting financial IT applications and underlying accounting records are identified, tested, authorized and implemented appropriately, (ii) user access controls to ensure appropriate segregation of duties and that adequately restrict user and privileged access to financial applications, programs, and data to appropriate personnel, (iii) computer operations controls to ensure that critical batch jobs are monitored and data backups are authorized and monitored and (iv) testing and approval controls for program development to ensure that new software development is aligned with business and IT requirements.