MiCSES Data Warehouse Audit Report 2006265r

TABLE OF CONTENTS INTRODUCTION 1 OBJECTIVES AND SCOPE 1-2 EXECUTIVE SUMMARY 2 AGENCY RESPONSE 2 FINDINGS AND RECOMMENDATIONS Security and Access Controls User Access, Monitoring, and Tax Information Policies 2-3 Security and Access Policy Enforcement 3-5 Access Request Forms 5-6 Authorized Requesters 6-7 System Administration Accounts 7-8 Timeliness of Deleting User Accounts 8-9 Data Share Agreements with Other Departments 9-10 Temporary Access Privileges 10-11 Data Integrity and Accuracy Controls Separation of Duties 11-12 INTRODUCTION The State of Michigan’s Teradata data warehouse is a centralized repository of data used to support State agencies’ decision-making and business processes. The DHS Office of Child Support’s (OCS) Michigan Child Support Enforcement System (MiCSES) Data Warehouse contains one subset of the data stored within the Teradata system. Department of Information Technology MiCSES (DIT-MiCSES) staff maintains and operates the MiCSES Data Warehouse on behalf of OCS. Much of the data stored on the MiCSES Data Warehouse is considered sensitive or confidential. DIT-MiCSES staff extracts data from source systems, transforms and formats the data, and loads the data into the MiCSES Data Warehouse. OCS staff and their ...