(Salem, OR) -- An audit is highly critical of the way Oregon State Police handles its computer information. Secretary of State Bev Clarno says OSP should take immediate action to address the findings in the audit. While some controls are partially implemented, auditors found OSP lacks basic IT controls and there's a perception from management the controls aren't necessary. The audit also found OSP doesn't have a proper security management program that identifies security protocols. OSP management agreed with the recommendations and they plan to ask for two additional IT staff members to implement the changes.