Summary
Summary
| Report Number: | 2009-018 |
| Report Title: | Department of Health - Information Technology and Selected Administrative Matters - Operational Audit |
| Report Period: | 07/2006 - 02/2008 and Selected Actions through 05/2008 |
| Release Date: | 10/08/2008 |
This operational audit of the Department of Health (Department) for the period July 2006 through February 2008, and selected actions through May 2008, focused on selected Department information technology (IT) controls and selected administrative matters. Specifically, these administrative matters included tangible personal property records and physical inventories, purchasing card use, Florida Accounting Information Resource Subsystem (FLAIR) user access, MyFloridaMarketPlace utilization, the People First payroll audit process, leave balance audits, additional employment notifications, and contract management.
Information Technology Controls
Shared Resource Center Access
Finding No. 1: Department supervisors did not adequately review or document the Shared Resource Center (SRC) access needs of staff, and SRC access privileges were not always timely removed.
Program Changes
Finding No. 2: The Department did not always properly document requests for, or the testing of, program changes. In addition, approved program changes were not held in a separate environment prior to being moved into production, and supervisory personnel did not log, review, or monitor the program changes when they were moved into production.
FLAIR Access
Finding No. 3: Department procedures did not ensure timely deletion of FLAIR user access for terminated employees.
Security Controls
Finding No. 4: In addition to the matters discussed in finding Nos. 1 through 3, certain security controls needed improvement. Specific details of these issues are not disclosed in this report to avoid the possibility of compromising Department data and IT resources.
Tangible Personal Property
Recording Property Acquisitions
Finding No. 5: The Department did not always timely record property items in the FLAIR Property Subsystem.
Property Acquisition Cost
Finding No. 6: The Department did not always accurately record the acquisition cost of property items in the FLAIR Property Subsystem.
Physical Inventories
Finding No. 7: Physical inventories were not always conducted by appropriate Department staff.
Finding No. 8: The Department did not document property disposals in accordance with applicable laws and rules.
Other Administrative Matters
Additional Employment
Finding No. 9: In some instances, Department employees either did not complete or did not appropriately complete notifications of additional employment.
Leave Balance Audits
Finding No. 10: The Department did not always conduct leave balance audits for employees separating from the Department. In addition, leave balance audit adjustments were not always reviewed for accuracy.
The State Surgeon General's response is included at the end of this report as APPENDIX A.