Jail Management System - Maricopa County

Jail Management System (JMS)
Sheriff's Office- JMS Report
February 2012
Audit Response - April 25, 2012
training and the test for TOC certification electronically. MCSO will no longer be
conducting security awareness training.
Completion Date: 4/13/12
Benefits/Costs: Increased accountability and control.
Recommendation C: MCSO should consider developing formalized policies and
procedures to periodically review and validate JMS access accounts and permissions.
Leading practices suggest users access reviews be conducted at least annually.
Response: Concur. JMS access accounts and permissions will be reviewed annually
corresponding with a TOC review that is conducted.
Target Completion Date: 6/30/12
Benefits/Costs: Increased accountability and control.
Issue #4:
MCSO does not have a formalized change management process for authorizing,
testing, and approving the Jail Management System (JMS) changes. JMS developers
have unrestricted access to the application. If unauthorized or untested changes are
introduced into JMS, they could create data integrity and system availability issues.
MCSO should strengthen its change management controls.
Recommendation A: MCSO should develop a formalized process for authorizing,
testing, and approving ...IMS changes.
Response: Concur. Changes to JMS "base" programming are rare (five or six annually)
and MCSO's limited technology staff has allowed this process to be very informal.
However, as technology staff increases and the Office moves forward with this and other
systems, this process will have to be formalized.
Target Completion Date: 1/31/13
Benefits/Costs: Increased accountability and control.
Page 2 of 4