ILLINOIS CRIMINAL JUSTICE INFORMATION AUTHORITY
For the Two Years Ended: June 30, 2009
Summary of Findings:
Total this audit: 3
Total last audit: 2
Repeated from last audit: 2
Release Date: March 30, 2010
State of Illinois, Office of the Auditor General
WILLIAM G. HOLLAND, AUDITOR GENERAL
To obtain a copy of the Report contact:
Office of the Auditor General, Iles Park Plaza, 740 E. Ash Street, Springfield, IL 62703
(217) 782-6046 or TTY (888) 261-2887
This Report Digest and Full Report is also available on the worldwide web at http://www.auditor.illinois.gov
• The Authority has not completed its disaster recovery planning or the related testing required to ensure it can quickly recover from a catastrophic event.
FINDINGS, CONCLUSIONS, AND RECOMMENDATIONS
LACK OF DISASTER CONTINGENCY PLAN
The Authority has not completed its disaster recovery planning or the related testing required to ensure it can quickly recover from a catastrophic event.
The primary mission of the Authority is to improve the administration of justice by enhancing the information tools available to State and local criminal justice agencies and administrators. To accomplish this, the Authority maintains several essential computer systems. One of the systems gathers and reports information regarding domestic violence, while another system assists law enforcement in it efforts to eradicate the production and use of methamphetamines in Illinois. This finding has been repeated since 1987.
Information technology guidance endorses the formal development and testing of disaster recovery plans. During the audit period, major operational changes reduced the risks facing the Authority, but did not eliminate the need for disaster contingency planning. (Finding 1, pages 8-9)
Authority officials accepted our recommendation that they complete the development of a comprehensive disaster contingency plan and stated they are currently working on completing the plan. (For previous agency response, see Digest Footnote 1.)
Other findings pertain to the failure to complete employee performance evaluations and missing documentation in personnel files. We will review progress toward the implementation of our recommendations in our next examination.
We conducted a compliance attestation examination of the Illinois Criminal Justice Information Authority for the two years ended June 30, 2009 as required by the Illinois State Auditing Act. We have not audited any financial statements of the Authority for the purpose of expressing an opinion because the Authority does not, nor is it required to, prepare financial statements.
WILLIAM G. HOLLAND, Auditor General
SPECIAL ASSISTANT AUDITORS
Our special assistant auditors were Bronner Professional Services, Inc.
#1 DISASTER CONTINGENCY PLAN WEAKNESS - Previous Agency Response
2007: “The Authority accepts this finding.”