Jail Management System - Maricopa County
Jail Management System - Maricopa County
Jail Management System - Maricopa County
You also want an ePaper? Increase the reach of your titles
YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.
JMS Environment<br />
Because JMS is a mission critical application, MCSO has been assessing future system<br />
requirements. MCSO IT reports several challenges with the current JMS environment.<br />
Mainframe - The mainframe on which JMS is running is supported by the vendor through 2014.<br />
The FY 2012 mainframe software license costs are $1.1 million, with an automatic annual 10<br />
percent increase, and annual mainframe hardware costs are $95,000. MCSO intends to<br />
renegotiate the contract during FY 2014. MCSO reports that for strategic purposes, MCSO may<br />
replace the existing mainframe, but has not submitted a budget request.<br />
Aging Workforce - JMS is a large and complex seventeen-year old system; its software is written<br />
in COBOL, a programming language that is no longer being taught in many universities.<br />
According to MCSO IT, as employees responsible for maintaining JMS retire, it may become<br />
difficult and expensive to replace them, negatively affecting the long-term maintenance of the<br />
system. The <strong>County</strong>’s Office of <strong>Management</strong> and Budget is completing a staffing study for<br />
MCSO IT.<br />
Scope and Methodology<br />
Audit Objectives<br />
The objectives of this audit were to determine that:<br />
Approach<br />
Effective general controls are in place to provide reasonable assurance that information<br />
systems are secure and available to users.<br />
Information technology general controls are overarching policies and procedures that<br />
apply to the network and organization-wide information systems. Reviewing general<br />
controls provides assurance that the controls are working as intended and that systems<br />
are appropriately supporting operations.<br />
Critical application controls are in place to provide reasonable assurance of the<br />
confidentiality, integrity, and availability of data.<br />
Application controls are specific to a single information system, such as JMS.<br />
Application controls are activities designed to support operations, and ensure the<br />
confidentiality, integrity and availability of application data.<br />
To achieve the audit objectives, we:<br />
Interviewed key employees from MCSO, the ICJIS agency, and the Office of Enterprise<br />
Technology (OET)<br />
Obtained and reviewed policies and procedures related to:<br />
o IT governance<br />
o Programs and data access (including application security, operating system<br />
security, database security, user authentication, and segregation of duties)<br />
<strong>Maricopa</strong> <strong>County</strong> Internal Audit 4 <strong>Jail</strong> <strong>Management</strong> <strong>System</strong>–May 2012