Audit Committee Materials - March 13 2018-no page # Background Image
Table of Contents Table of Contents
Previous Page  10-11 / 92 Next Page
Information
Show Menu
Previous Page 10-11 / 92 Next Page
Page Background

Institution

Report

Release

Date

Recommendation

Responsible Staff

Date

Management’s

Actions to be

Implemented

Revised Date

Management’s

Actions to be

Implemented

# of Changes to

Date

Management's

Actions to be

Implemented

Initial Date of

Internal Audit

Follow-up

Most Recent

Date of Internal

Audit Follow-up

Status

TBR SWIA - Status Report on Internal Audit Recommendations- Community Colleges

(Reports sorted by Status, Institution, Report Release Date)

ChSCC 21-Apr-17 ChSCC Sensitive Equipment 7 of 7:

Surplus documentation procedures should be developed to ensure accurate

equipment final resolution documentation and timely removal from in-service.

Documentation should include the date of surplus and final resolution such as reason

for being destroyed or released to warehouse for auction consideration by the

Business Office.

Documentation of this process should include a time-frame requirements, completion

sign-offs, and timely management review to ensure the process is completed in a

timely manner.

VP of

Technology/Director of

Educational Technology

31-Dec-17

0

12-Jan-18

Action

Completed

ClSCC 13-Feb-17 ClSCC Building Access and Keys December 2016.

HR should be given access to Keystone software for the purposes of removing keys

from the Keystone software for terminated employees only.

Assistant VP of Finance

3-Jul-17

31-Dec-17

2

26-Jul-17

4-Dec-17

Action

Completed

DSCC

30-Jun-17 An IT Disaster Recovery policy that shows the purpose, objectives, an outline of the

development and approval process of the IT Disaster Recovery Plan, and any other

pertinent issues relating to IT Disaster Recovery should be developed. The most

current IT Disaster Recovery Plan should be an attachment to this policy.

Vice President for

Technology

30-Nov-17

0

30-Nov-17

Action

Completed

DSCC

30-Jun-17 The current IT Disaster Recovery Plan developed in January 2017 needs to be

reviewed, updated, approved and reissued. This plan was last approved by the DSCC

President in October of 2014. A newer version of the plan was updated and passed by

the IT Committee in January 2017 but this version had no final approval of the DSCC

President. Since the last update to this plan, the Vice President for Technology

resigned and a new Vice President is now in place for this area.

A subsequent review of the IT Disaster Recovery Plan by IT Management and the

Director of Internal Audit has shown the need for it to be updated once again and

approved by both the IT Committee and the DSCC President.

Vice President for

Technology

31-Aug-17

30-Nov-17

1

30-Nov-17

Action

Completed

DSCC

30-Jun-17 Critical points of failure should be further identified and addressed more clearly in the

IT Disaster Recovery Plan. More network diagrams, inventories, calling trees, etc.

could be used to specifically identify how systems are supposed to be organized and

the exact procedures needed in various situations. The plan does identify key

applications and discusses the general priorities for restoring IT systems in the event

of outages, but more detail is needed in this area of the plan.

Vice President for

Technology

31-Aug-17

30-Nov-17

1

30-Nov-17

Action

Completed

DSCC

30-Jun-17 A test plan and schedule is needed for the continuous review of the IT Disaster

Recovery Plan and its various components. Various system recovery tests should be

performed on a rotating basis and documented. Personnel cross training is also

advised in key areas.

Vice President for

Technology

30-Nov-17

30-Nov-17

1

Action

Completed

NeSCC 21-Jun-17 The department should implement policy 05:08:01 Compensatory Time for all non-

exempt employees and develop procedures to ensure the policy is followed.

Management should work with Human Resources to ensure their procedures comply

with policy.

Chief of Police

21-Dec-17

0

14-Dec-17

Action

Completed

6