Jail Management System - Maricopa County

o Program development (including project management, authorization, technical
and user testing, user training, and developer/production segregation of duties)
o Program change management (changes to existing applications – including
emergency changes and monitoring, developer segregation of duties, and testing
of requested changes)
o Computer operations (including disaster recovery, system backups, job
scheduling, data conversion, system interfaces, and problem management)
Observed MCSO personnel using JMS
Identified key IT and application controls
MCSO data center IT general controls were not considered during the course of this review.
Internal Audit conducted a separate MCSO Data Center Audit where applicable IT general
controls were considered; the report was issued March 15, 2012.
Due to the sensitive nature of network security issues, the results of our network security testing
were detailed in a separate memo to management.
Audit Timeframe
Our audit included data from July 2010 through October 2011.
Auditing Standards
We conducted this performance audit in accordance with generally accepted government
auditing standards. These standards require the following:
An independent audit staff and audit organization
An objective audit staff performing the work
A competent staff, current with continuing education requirements
A system of quality control procedures
Sufficient and appropriate evidence based on audit objectives
Maricopa County Internal Audit 5 Jail Management System–May 2012