Michigan State Disbursement Unit SAS 70 Audit Report Review 2004056

Suite 1112 Grand Tower Bldg.235 S. Grand Ave.P.O. Box 30037Lansing, MI 48909www.mfia.state.mi.usSTATE OF MICHIGANFamilyOffice of Internal AuditIndependenceMemoAgency Tel: 517 373-8770 Fax: 517 373-8771To: Date:David Mork, Director January 26, 2004Michigan State Disbursement Unit From: Rita Barker, DirectorOffice of Internal AuditSubject: Michigan State Disbursement Unit SAS 70 Audit Report ReviewProject 2004-056The Office of Internal Audit performed a limited scope review of the most recent SAS 70 AuditReport, covering control policies and procedures placed in operation for the period October 1,2002-September 30, 2003, at the Michigan State Disbursement Unit (MiSDU). Objectives of ourreview were:1. To determine if the annual MiSDU SAS 70 report provides adequate control environmentcoverage2. Provide recommendations to MiSDU management if control environment coverage can beimprovedThe scope of our review included obtaining and reading the most recent MiSDU SAS 70 reports,Internet research on what should be included in a SAS 70 audit, review and comparison of otherrdFIA 3 party SAS 70 audit reports, and review of State of Michigan Office of the Auditor Generalwork papers related to information system controls at the State Disbursement Unit. Wecompared the control areas covered in the most recent MiSDU SAS 70 audit report with auditrdreports of other FIA 3 party vendors and external research criteria.In our opinion the ...