Summary

Pursuant to Section 409.2557(1), Florida Statutes, the Department of Revenue (Department) is designated as the State agency responsible for the administration of Florida’s Child Support Enforcement (CSE) Program under Title IV-D of the Federal Social Security Act.  Pursuant to Title 45, Section 302.85(a), Code of Federal Regulations, states are required to have in effect a computerized child support enforcement system. The Florida On-Line Recipient Integrated Data Access (FLORIDA) System, operated and maintained by the Department of Children and Family Services, was the Title IV-D system that provided the daily information processing operations for the CSE Program.

The Department undertook the CSE Automated Management System (CAMS) initiative to eventually replace, in phases, the functionality of the CSE Component of the FLORIDA System.  CAMS was being developed and implemented in two sequential functional increments.  The first increment, CAMS Phase I, was implemented Statewide by April 2006 and provided Compliance Enforcement.  The projected completion date for the second increment, CAMS Phase II, was February 2011.

Our audit focused on evaluating selected information technology (IT) controls applicable to CAMS Phase I during the period January 2007 through July 2007.

The results of our audit are summarized below:

Finding No. 1:         The Department’s error review and reporting process needed improvement.

Finding No. 2:        The Department experienced ongoing problems with address information in CAMS.

Finding No. 3:        Intended functionality for reporting and follow-up on a missing key data field in CAMS had not been implemented.

Finding No. 4:        Our audit disclosed aspects of the Department’s practices for managing access privileges that needed improvement.  We also noted instances of excessive or inappropriate system access privileges.

Finding No. 5:        We noted instances where the Department did not timely remove the access privileges of terminated employees.

Finding No. 6:        Improvements were needed in certain security control features related to CAMS Phase I and the supporting network environment at the Department, in addition to the matters discussed in Findings No. 4 and 5.

The Executive Director's response is included at the end of this report as Appendix A.