Summary

Report Number:	2010-008
Report Title:	Department of Elder Affairs - Payments to Service Providers and the Client Information and Registration Tracking System - Operational Audit
Report Period:	07/01/2007 - 01/30/2009 and Selected Actions Through 04/2009
Release Date:	08/04/2009

This operational audit of the Department of Elder Affairs focused on payments to service providers and selected general and application controls related to the Client Information and Registration Tracking System (CIRTS).  The audit covered the period July 2007 through January 2009 and selected actions through April 2009, and included a follow-up on prior audit findings.  Department records supported the tested payments to service providers; however, our audit disclosed significant information technology (IT) control deficiencies.  Specifically:

Finding No. 1:    Department management of CIRTS access privileges needed improvement.

Finding No. 2:    Certain security controls protecting CIRTS data and Department IT resources needed enhancement.

---

Management's response is included in the report as Exhibit A.