Insecure postal database vulnerable to fraud: CAG

The database of Department of Posts has not been secured and is easily susceptible to data manipulation and fraud, the Comptroller and Auditor General (CAG) today warned.
The CAG noted that the objective of computerisation of postal savings bank functions through Sanchay Post software was to improve operational performance and provide error-free and faster service to customers.
"We observed that the database has not been secured and is easily susceptible to data manipulation, which may lead to fraud," it said.
As data entry mode is being used even when online module is in operation, the data don't get validated by the controls/rules built into the software, causing many rule violations in opening of accounts and loss to the government, besides exposing system to the risk of fraud, it added.

"The software is unable to exercise necessary control to prevent opening of multiple/excess accounts and deposits, thus causing loss to the government due to payment of excess interest," the CAG said.
The auditor pointed out that customer application forms, the only available information given by the customer duly signed by him with necessary declarations, have not been preserved in many post offices.

The CAG also found that information kiosks procured for providing postal information and Internet browsing facility to customers in post offices (POs) remain underutilised.
"(About) 75 per cent of kiosks test checked by audit were not being utilised at all," it noted.

Besides, audit of the mail operations in 75 selected POs under nine circles found that mail operations have improved in most areas, but there is scope for further improvement in certain circles.
"Evaluation of booking and delivery of money orders (MOs) revealed that delivery performance of MOs in test-checked post offices in Delhi, the North East, Uttar Pradesh and Gujarat circles was below the threshold limit," it added.
The auditor found the delivery performance of speed post better than those of private couriers in major cities at the tehsil and village levels.
The CAG noted that none of the states could adhere to the timeframe proposed for the creation and implementation of core and support infrastructure for various projects under the National e-Governance Plan (NeGP).

"There was lack of synchronisation in the execution of projects leading to delays in e-delivery of services. The pace of utilisation of the infrastructure like SWAN and SDC in furthering e-governance in 10 states selected for audit was found to be slow," it said.
Therefore, there is a need for close monitoring for optimum utilisation of infrastructure, the CAG added.