AUDIT OF RTC MORTGAGE TRUST 1995-SN1

September 1, 2000Audit Report No. 00-038Audit of the Information TechnologyConfiguration Management ProgramFederal Deposit Insurance Corporation Office of Audits Washington, D.C. 20434 Office of Inspector General DATE: September 1, 2000TO: Donald C. Demitros, DirectorDivision of Information Resources ManagementFROM: David H. LoewensteinAssistant Inspector GeneralSUBJECT: Audit of the Information Technology Configuration ManagementProgram (Audit Report No. 00-038)The Federal Deposit Insurance Corporation’s (FDIC) Office of Inspector General (OIG) hascompleted an audit of the Information Technology Configuration Management (CM) Program. Weinitiated this audit to (1) evaluate the effectiveness and (2) assess the implementation of the FDIC'sCM program policies and procedures. However, during the audit survey, we found that the FDIC’sDivision of Information Resources Management (DIRM) was in the process of developing a plan forestablishing a more formal CM program. The purpose of this report is to provide ourrecommendations as to what DIRM should consider when developing the formal CM program. Werecognize that DIRM management has already taken many positive steps in initiating the CM study,appears to have identified the critical issues in its CM efforts, and may independently developsimilar conclusions ...