Jail Management System - Maricopa County

Issue 1 IT Control Environment
Summary
The Maricopa County Sheriff’s Office (MCSO) information technology (IT) control
environment generally follows industry standards in key areas.
Criteria
COBIT, an international, generally–accepted, IT control framework, gives guidance about
control requirements, technical issues, and business risks. Internal Audit uses COBIT as an
authority for good IT control practices. The COBIT framework recommends:
Defining and implementing a technology infrastructure plan, architecture, and standards
that leverage technology opportunities
Establishing transparent, flexible, and responsive IT organizational structures, and
defining and implementing IT processes
Segregating responsibilities throughout the enterprise
Establishing preventative and detective controls to protect information systems and
technology from malware (e.g., viruses, worms, spyware, and spam)
Implementing automated solutions to support source code management and change
migration between production environments
Meeting operational service levels for scheduled data processing, protecting sensitive
output, and monitoring and maintaining infrastructure
Establishing interface controls to ensure the accuracy and completeness of data transfers
Establishing backup controls to ensure data availability
Establishing procedures to identify, resolve, and document system and application issues
Maricopa County Internal Audit 7 Jail Management System–May 2012