The Council provided information technology support services (ITSS) in accordance with its memorandum of understanding with participating agencies.
However, the Council did not have documented policies and procedures providing guidance to participating agencies on (1) user access levels for the network and supported applications and (2) identifying and classifying sensitive data.
In addition, auditors determined that the Council’s help desk ticket data in its Spiceworks application was not reliable. There were 167 (7.6 percent) duplicate tickets from a
population of 2,210 closed tickets from September 1, 2016, through January 31, 2018. In addition, the data contained inaccurate information in key system fields.
Jump to Chapter 3