SAI-Rwanda yakiriye amahugurwa ya AFROSAI-E ku bugenzuzi bwa ‘MS SQL Database’
Ibiro by'Umugenzuzi Mukuru w'Imari ya Leta (OAG), ari na byo Urwego rw'Ikirenga rw'Ubugenzuzi bw'Imari ya Leta mu Rwanda (SAI-Rwanda), byakiriye amahugurwa yateguwe n'Umuryango w'Inzego Nkuru z'Ubugenzuzi bw'Imari ya Leta zo mu bihugu bikoresha Icyongereza muri Afurika (AFROSAI-E) ku Gahunda y'Abayobozi b'Ubunyamwuga mu Bugenzuzi bw'Ikoranabuhanga (Information System Audit Champion Program) – Icyiciro cya 2 (Module 2), yibanze ku bugenzuzi bw'ububikoshingiro bw'amakuru (MS SQL Database).
Aya yabaye kuva ku wa 25 kugeza 29 Gicurasi 2026, yahuje abagenzuzi 31 baturutse mu bihugu bigize AFROSAI-E birimo Afurika y'Epfo, Namibia, Eswatini, Uganda, Zambia, Mauritius n'u Rwanda. Yatanzwe n'abagenzuzi baturutse muri Afurika y'Epfo, Namibia, Zambia na Gambia. Yari agamije guha abagenzuzi b'ikoranabuhanga (IS Auditors) ubumenyi bwo gukoresha ''VMware image environment' mu gukura no gusesengura amakuru ajyanye n'umutekano n'iby'imari abitswe mu bubikoshingiro bw'amakuru, no kugereranya ibyagaragaye n'amahame mpuzamahanga ngenderwaho.
Uyu wanabaye umwanya mwiza ku bagenzuzi b'ikoranabuhanga aho bahawe urubuga rwo gusangizanyaho ubunararibonye, kuvugurura ubumenyi bwabo no kurushaho kongerera ubushobozi mu bugenzuzi bw'ikoranabuhanga, banaganira ku mbogamizi bahura na zo mu gihe cy'ubugenzuzi.
Aya mahugurwa kandi yari anagamije gukemura ibibazo bigaragara mu bugenzuzi bw'ikoranabuhanga no kunoza inkunga butanga mu bugenzuzi bw'imari, ubw'iyubahirizwa ry'amategeko n'ubw'imikorere, nk'uko byagaragajwe n'ibyifuzo by'Inzego Nkuru z'Ubugenzuzi bw'Imari ya Leta (SAIs) ndetse no mu isuzuma ry'ubuziranenge (quality assurance reviews).
Afungura aya mahugurwa, Umugenzuzi Mukuru w'Imari ya Leta mu Rwanda, Kamuhire Alexis, yashimangiye akamaro k'ubugenzuzi bw'ikoranabuhanga. Yagize ati: “(...) Ubugenzuzi bw'ikoranabuhanga bufasha kongera imikorere myiza y'inzego, kunoza itangwa rya serivisi no kurushaho kurinda umutekano wa sisitemu.”
Yakomeje avuga ko ubuziranenge bw'amakuru (data integrity) bukomeje kuba kimwe mu bibazo bikunze kugaragara mu byegeranyo by'ubugenzuzi bw'ikoranabuhanga, anagaragaza icyizere ko aya mahugurwa azongera ku buryo bugaragara ubushobozi bw'abagenzuzi b'ikoranabuhanga bo mu bihugu byose byayitabiriye.
Abitabiriye amahugurwa bungutse ubumenyi bwimbitse ku buryo bwo gukora ubugenzuzi bw'ikoranabuhanga bwibanda ku mutekano wa Microsoft SQL Server. Amahugurwa yibanze ku bumenyi bw'ibanze bwa MS SQL Server, ingaruka z'umutekano, gusuzuma uburemere bw'ingaruka (materiality), gutegura laboratwari, kuboneza VMware image, gukura no gusesengura amakuru hifashishijwe sqlcmd, ndetse no gukoresha inyandiko (audit scripts) za MS SQL mu bugenzuzi.
Abayitabiriye kandi bize gusuzuma uburyo bwo kugenzura uburenganzira bw'abakoresha (user access controls), uburenganzira bwo kugera ku makuru (permissions), politiki z'ijambobanga (password policies), igenamiterere rigabanya ibyago by'umutekano (surface area reduction settings), uburyo bwo kubika amakuru y'ibikorwa (logging mechanisms), imicungire y'amaseriveri n'amavugurura yayo (version management), uburyo bwo gushyiraho amavugurura y'umutekano (patching practices), ndetse n'ikoreshwa rya Transparent Data Encryption (TDE).
Iki cyiciro cy'amahugurwa cyasojwe n'imyitozo ngiro, ibiganiro byatanzwe n'abitabiriye, ndetse n'isuzuma rusange ry'ingingo z'ingenzi n'ibyavuye mu bugenzuzi. Umunyarwandakazi, Jacqueline MUKAMANA, ni we wahize abandi ahembwa mudasobwa mu gihe itsinda rya 7 ariryo ryitwaye neza.
Abitabiriye bashimiye byimazeyo ubuyobozi bwa SAI-Rwanda, aho bagize bati: “Turashimira ubuyobozi bwa SAI-Rwanda bwateguye aya mahugurwa neza ndetse n'inkunga yose bwaduhaye, bikaba byaratumye tuyitabira neza kandi akadufasha kugera ku ntego zayo. Twiyemeje gushyira mu bikorwa ubumenyi n'ubushobozi twahungukiye muri aya mahugurwa mu kazi kacu ka buri munsi kugira ngo turusheho kunoza raporo z'ubugenzuzi bw'ikoranabuhanga, zitange inama zubaka.”
Ibi byatangajwe na Paniken Yogeswaree Devi, Umugenzuzi w'Ikoranabuhanga ukomoka muri Mauritius, mu kiganiro yagiranye n'ikinyamakuru cya OAG.
Aya mahugurwa yunganira izindi gahunda zisanzwe zitegurwa na AFROSAI-E, zirimo gahunda yo kongerera ubushobozi abagenzuzi mu kugenzura no gusuzuma Integrated Financial Management Systems (IFMIS).