INADEQUATE COMPUTER CONTROLS OVER LOCAL AREA
NETWORKS (LANS) The Department has not
established adequate computer controls over local
area networks. The Department of State Police has
an investment of approximately $2 million in LAN
hardware and software. Approximately 800
employees have access to 75 networks located
throughout the State. However, formal policies
and procedures for coordinating and monitoring
LANs do not exist. Rather, individual
Departmental units are solely responsible for
maintaining and controlling individual local
networks. We found that some of the network's
security features were not activated; policies
and procedures for the selection, installation,
and maintenance were lacking; and no security
awareness program existed. (Finding 5, page14) This
finding has been repeated since 1992.
We recommended the Department formally adopt
policies and procedures to help ensure that LANs
are adequately and consistently controlled
throughout the Department. The Department
concurred and stated they planned to implement
security policies by July 1, 1997. (For previous
Department responses, see Digest footnote 1.)
INADEQUATE TRACKING OF CRIME LABORATORY
ANALYSIS FEES
The Department does not have adequate
procedures to track fees generated by crime
laboratory analysis services to ensure all fees
owed are remitted or are remitted on a timely
basis. The criminal laboratory analysis fee is
imposed on persons found guilty of certain
criminal offenses which necessitate submission of
laboratory reports into evidence. The fee is
collected by Circuit Clerks and remitted to the
Department. Crime laboratory analysis fees were
$191,221 in fiscal year 1995 and $220,774 in
fiscal year 1996.
The Department indicated that tracking the
fees was difficult because they did not control
evidence and did not levy or collect the fee.
However, not tracking fees could result in an
understatement of accounts receivable and in lost
revenue to the State. (Finding 6, page 15) This
finding has been repeated since 1992.
We also note that the Department of State
Police receives other fees through Circuit
Clerks, including overweight truck fines, drug
related fines, and other miscellaneous amounts. A
June, 1996 report of the Circuit Clerk Audit
Guideline Committee recommended that annual
audits of Circuit Clerks include reviews of
remittances submitted to State and local
governments. If and when this recommendation
becomes law, this would help State agencies track
fees but would not relieve them of their
responsibilities to monitor receipts.
We recommended the Department establish a
process to track laboratory reports through the
courts to ensure fees due are being remitted, or
develop other procedures for determining
compliance. We suggested tracking laboratory fees
could be done by using analytical review
procedures.
The Department concurred with our
recommendation and stated that it will make
efforts to monitor trends or fluctuations and
will address these when found. (For previous
Departmental responses, see Digest footnote 2.)
EXCESS INVENTORY LEVELS
The Department of State Police maintains
inventories at several locations which consists
of uniforms and various operating supplies. At
June 30, 1996 the inventory value was about $3.4
million. These inventory levels were
approximately twice the annual usage, which is
not in compliance with the Illinois Purchase Act.
According to the Department, uniforms, which
comprise a large portion of the inventory, must
be ordered in large quantities and carried in a
variety of sizes. However, we note that the
Department is susceptible to a higher level of
risk of loss due to theft, obsolescence or damage
as inventory levels increase. Additionally, the
existing inventory system is not capable of
establishing automated restocking points, thus
the supply section is required to assess
inventory needs using a manual system. (Finding
7, page 16)
We recommended the Department reduce existing
inventory levels and establish minimum restocking
levels. Also, the Department should consider
developing a more cost effective approach for the
inventory system.
The Department concurred and stated that their
Information Services Bureau is working on a
project to more efficiently utilize the Uniform
Inventory System.
OTHER FINDINGS
The remaining findings are less significant
and are being given appropriate attention by the
Agency. We will review its progress toward
implementing these recommendations in our next
audit.