According to the Independent Commission Against Corruption (ICAC), key student record system weaknesses include absence of full audit trails, infrequent checks that access levels are appropriate, and a variety of problems concerning 'modify/create' access to records. While not all universities show all weaknesses, none have addressed all corruption risk areas, according to the report.
The report is a result of the Commission's investigation into the actions of UTS student liaison officer Toto Sujanto, who was recently found to have accepted bribes from international students to change their grades from -failed" to -cancelled".
Brian Clark, in charge of IT security at Newcastle University, believes the problems are the result of the recent implementation of new systems.
-We've had some minor teething with the new systems," he told ZDNet Australia. -It was more manual systems rather than electronic." He explained that the technology itself was fine, but the way people used the technology could still be improved.
According to Clark, Newcastle University is in the middle of reviewing its risk management plan, a process which should be finished by the end of the year.
-We're doing a complete review of what levels of security are in place and who's got access to what," he said. -We're finalising and formalising that."
Nicole Hayward, part of IT security at the University of Sydney, believes the problems are widespread in business in general. -Making sure you have to put processes in place for when people leave, tightening up security, and making sure those people who have accounts are the ones who need them," were important aspects to consider, she said.
Hayward said the University of Sydney will do a review of those processes in the near future, but couldn't put a timeframe on it.
Other universities ZDNet Australia contacted were unavailable for comment.
In carrying out the survey, ICAC spokesperson Rachelle Fenton said the Commission wanted to point out that these are systematic issues that affected the whole sector.
-What we are advocating is that universities should develop a common approach to corruption risk," Fenton said.
ICAC is organising a forum later this month to address that issue.
In response to the report, the Australian Vice-Chancellors' Committee (AVCC) said it would review it in full and has asked all Australian universities to review their new student records system.
-Whilst the AVCC does not believe this is a widespread problem, the fact remains that with a system as large as the sector--with more than 700,000 students--problems will occasionally arise," said AVCC president, Professor Deryck Schreuder in a statement.
The minister for education, Dr Brendan Nelson, is waiting to see what action the AVCC will take before responding to the situation himself.
-The minister is watching with interest and notes the AVCC is looking into it," said a spokesperson for the minister. -The minister is waiting for that report."
