Office of Audit and Evaluation Director

Office of Audit Services and Management Support MEMORANDUM To: Conrad C. Cross, Chief Information Officer From: J. T. Sirak, CPA, Director Office of Audit Services and Management Support Re: Follow-Up Review of the Audit of Information Systems General Controls (Report No. 09-06) Date: May 22, 2009 Attached is a summary of the status of recommendations as determined from our follow-up review of the Audit of Information Systems General Controls (Report No. 08-10), issued May 23, 2008. Our review procedures consisted of a review of the status of the recommendations provided by the Technology Management Division, inquiries of management, and examination of certain documents. Our follow-up was made in accordance with generally accepted government auditing standards. The standards require that we plan and perform the audit to obtain sufficient, appropriate evidence to provide a reasonable basis for our findings and conclusions based on our audit objectives. The Technology Management Division did not concur with three of the original twenty-six recommendations; of the remaining twenty-three recommendations, ten have been implemented, ten have been partially implemented and three are planned for implementation. Five of the partially implemented recommendations concern updating procedures that are expected to be inted by September 2009 and four recommendations involve software acquisition and/or installation ...