A report from the General Audit Office (AGN, for its acronym in Spanish), said that the "behavior" shown by the leadership of the National Library in the management of information technologies "generates typical drawbacks of a lack of planning."

The agency evaluated whether the Library fulfilled the four targets set by the COBIT standards. It is standard on "planning and organization," "administration and implementation," "delivery and support" and "monitoring." The report was approved last year on data for the period July 2007-February 2008.

Among its key findings, the AGN says that in the National Library has "no awareness that strategic planning is needed" in both information technology and infrastructure, and stresses that "they don’t have the knowledge or expertise to develop them."

Moreover, no one is aware of the importance of selecting and budget investments in technology or tracking expenses recorded in this area are made. On the other hand, "there is no person or anyone formally responsible for the management of specific human resources group," says the audit, and complete that "the System staff is hired but not evaluated."

As for the administration and implementation of technology, the report argues that "there is no formal process to design and specify" software that are necessary in the operation of the library, and that "in general, applications are obtained (by) offering providers, brand recognition or staff familiarity with the product."

The item "delivery and support" of the COBIT standards refers to technology services being always available; ensuring that if a shutdown were to occur, the impact on the activities of the body in question would be minimal, to protect the information against unauthorized use and disclosure or modification. However, according to auditors at the National Library "the data are not considered a resource and an asset, and its quality and safety are nil." In fact, we observed that the application system used to serve the public" is a catalog with data only from books received until 2004, has no maintenance due to lack of source programs and trained personnel." The data from 2004 "appears in an ad hoc inventory waiting hiring a library management system", which was in the process of bidding at the end of the report.

"They do not understand the risks, vulnerabilities and threats for the operations of information technology, and the impact that the loss of service can have (on the functioning of) body," says the Audit and adds that although the Library "recognizes the need for security" of the data, it is argued that "awareness depends on the individual," and that responsibilities are unclear.

What is not defined are the accountabilities of the services offered by contractors. The technicians say that "in the absence of a contractual obligation to report, senior management (the Library) is not aware of the quality of services provided by third parties."

After a tour of the building, the AGN discovered that "has not become aware of the need to protect the facility, or to invest in computing resources; no control or monitoring of environmental factors (fire, dust, high blood pressure, excessive heat and humidity); the location of the computer center is inappropriate, is in what was a deposit in height cross pipes that carry different fluids and endanger the continuity of its operation ".

Against this background, the audit concluded that "none of the four objectives (of the COBIT) reaches the necessary to ensure the preservation of digital information available at present minimum level," which is "jeopardized by the lack of standards security."

The National Library is an autonomous body that operates under the jurisdiction of the Ministry of Culture of the Nation. The Watchdog ended its work with recommendations for the two administrative levels.

The Directorate of the Library, on the one hand, suggested giving "the highest priority and urgency to form a professionalized computer field; designate a responsible, define the organization and the plant; appoint trained personnel; and hire necessary equipment and applications."

On the other hand, it urged Culture to "provide the budget" to enable the institution to improve standards because, in these circumstances, "it is estimated impossible to comply with the recommended without adequacy of available resources for information technology."