FINAL Report - Audit of eCIMS

Audit of the electronic Common Information Management System (eCIMS) Development Project December 2004 Table of Contents Executive Summary Introduction 1 Audit Objective, Scope, and Timing 1 Overall Audit Assessment 2 Detailed Report Background on Information Management (IM) 5 The eCIMS Development Project 7 Detailed Audit Observations, Discussions, and Recommendations 10 Appendix A: Auditor’s Risk Assessment of the eCIMS Development Project 20 Appendix B: Audit Criteria 22 Appendix C: Audit Methodology and Approach 24 Executive Summary Introduction The audit of the electronic Common Information Management System (eCIMS) development project is included in the Audit Plans for 2004-05 of both the Natural Sciences and Engineering Research Council of Canada (NSERC) and the Social Sciences and Humanities Research Council of Canada (SSHRC). Accordingly, the audit has been conducted jointly by the two Councils. The Councils’ Corporate Risk Profiles identified outdated processes for recorded information, particularly in terms of electronic information life-cycle management, as a key risk to their capacity to manage and report accurate and complete Council information to various stakeholders. The Profiles also recognized the related ...