Summary

Our audit focused on management controls and selected information technology functions applicable to the Orion System at the Florida Community College at Jacksonville (the College) during the period April 30, 2001, through August 13, 2001.

The Orion System is the College’s enterprise software system providing college-wide administrative and instructional support.

Deficiencies were noted in the College’s access, application, and general management controls related to the Orion System. Specifically, these matters included:

• Lack of policies and procedures defining operations, roles, and responsibilities of Information Systems Support;
• Inadequate safeguards imposed for the Data and Network Operations Center and inadequate network back-up procedures;
• Inadequate preparation for prolonged service interruption through a written comprehensive Disaster Recovery Plan;
• Functional and reporting deficiencies in the Orion System’s fundamental financial processing resulting in increased manual procedures and duplicative effort for reconciliation;
• Inadequate time for the College’s batch job processing needs; and
• Deficiencies in the College’s information security controls applicable to the Orion System.

The College's response can be viewed in its entirety on the Auditor General Web Site.