Jail Management System - Maricopa County
Jail Management System - Maricopa County
Jail Management System - Maricopa County
Create successful ePaper yourself
Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.
<strong>Jail</strong> <strong>Management</strong> <strong>System</strong> (JMS)<br />
Sheriff's Office- JMS Report<br />
February 2012<br />
Audit Response - April 25, 2012<br />
training and the test for TOC certification electronically. MCSO will no longer be<br />
conducting security awareness training.<br />
Completion Date: 4/13/12<br />
Benefits/Costs: Increased accountability and control.<br />
Recommendation C: MCSO should consider developing formalized policies and<br />
procedures to periodically review and validate JMS access accounts and permissions.<br />
Leading practices suggest users access reviews be conducted at least annually.<br />
Response: Concur. JMS access accounts and permissions will be reviewed annually<br />
corresponding with a TOC review that is conducted.<br />
Target Completion Date: 6/30/12<br />
Benefits/Costs: Increased accountability and control.<br />
Issue #4:<br />
MCSO does not have a formalized change management process for authorizing,<br />
testing, and approving the <strong>Jail</strong> <strong>Management</strong> <strong>System</strong> (JMS) changes. JMS developers<br />
have unrestricted access to the application. If unauthorized or untested changes are<br />
introduced into JMS, they could create data integrity and system availability issues.<br />
MCSO should strengthen its change management controls.<br />
Recommendation A: MCSO should develop a formalized process for authorizing,<br />
testing, and approving ...IMS changes.<br />
Response: Concur. Changes to JMS "base" programming are rare (five or six annually)<br />
and MCSO's limited technology staff has allowed this process to be very informal.<br />
However, as technology staff increases and the Office moves forward with this and other<br />
systems, this process will have to be formalized.<br />
Target Completion Date: 1/31/13<br />
Benefits/Costs: Increased accountability and control.<br />
Page 2 of 4