The Division of Emergency Management (Division) within the Department of Community Affairs (Department) is responsible for maintaining a comprehensive Statewide program of emergency management, and provides programs and services to assist communities in preparing for and responding to natural and man-made disasters.  The Division uses the EMTraker System to assist in managing emergency situations.  The EMTraker System provides a database and a communications link between local governments and emergency responders at the State Emergency Management Center (EOC).

Our audit focused on evaluating the effectiveness of selected general controls related to the EMTraker System and its information technology (IT) environment for the period June 2005 through September 2005.  The results of our audit are summarized below:

Finding No. 1:         Improvements were needed in the Department’s entitywide security program.  

Finding No. 2:         Deficiencies were noted in certain security controls protecting the EMTraker System.

Finding No. 3:         Environmental control improvements were needed at the Department’s data center housing various operational systems, such as EMTraker.

Finding No. 4:         Improvements were needed in the Department’s Information Systems Development Methodology (ISDM).   

The Division Secretary's response is included at the end of this report as Appendix A.