|Report Title:||Department of Elder Affairs - Payments to Service Providers and the Client Information and Registration Tracking System - Operational Audit|
|Report Period:||07/01/2007 - 01/30/2009 and Selected Actions Through 04/2009|
This operational audit of the Department of Elder Affairs focused on payments to service providers and selected general and application controls related to the Client Information and Registration Tracking System (CIRTS). The audit covered the period July 2007 through January 2009 and selected actions through April 2009, and included a follow-up on prior audit findings. Department records supported the tested payments to service providers; however, our audit disclosed significant information technology (IT) control deficiencies. Specifically:
Finding No. 1: Department management of CIRTS access privileges needed improvement.
Finding No. 2: Certain security controls protecting CIRTS data and Department IT resources needed enhancement.
Management's response is included in the report as Exhibit A.