REPORT DIGEST

ILLINOIS CRIMINAL JUSTICE INFORMATION AUTHORITY

COMPLIANCE EXAMINATION

For the Two Years Ended: June 30, 2009

Summary of Findings:

Total this audit: 3

Total last audit: 2

Repeated from last audit: 2

Release Date: March 30, 2010

State of Illinois, Office of the Auditor General

WILLIAM G. HOLLAND, AUDITOR GENERAL

To obtain a copy of the Report contact:

Office of the Auditor General, Iles Park Plaza, 740 E. Ash Street, Springfield, IL 62703

(217) 782-6046 or TTY (888) 261-2887

This Report Digest and Full Report is also available on the worldwide web at http://www.auditor.illinois.gov

SYNOPSIS

• The Authority has not completed its disaster recovery planning or the related testing required to ensure it can quickly recover from a catastrophic event.

FINDINGS, CONCLUSIONS, AND RECOMMENDATIONS

LACK OF DISASTER CONTINGENCY PLAN

The Authority has not completed its disaster recovery planning or the related testing required to ensure it can quickly recover from a catastrophic event.

The primary mission of the Authority is to improve the administration of justice by enhancing the information tools available to State and local criminal justice agencies and administrators. To accomplish this, the Authority maintains several essential computer systems. One of the systems gathers and reports information regarding domestic violence, while another system assists law enforcement in it efforts to eradicate the production and use of methamphetamines in Illinois. This finding has been repeated since 1987.

Information technology guidance endorses the formal development and testing of disaster recovery plans. During the audit period, major operational changes reduced the risks facing the Authority, but did not eliminate the need for disaster contingency planning. (Finding 1, pages 8-9)

Authority officials accepted our recommendation that they complete the development of a comprehensive disaster contingency plan and stated they are currently working on completing the plan. (For previous agency response, see Digest Footnote 1.)

OTHER FINDINGS

Other findings pertain to the failure to complete employee performance evaluations and missing documentation in personnel files. We will review progress toward the implementation of our recommendations in our next examination.

AUDITORS’ OPINION

We conducted a compliance attestation examination of the Illinois Criminal Justice Information Authority for the two years ended June 30, 2009 as required by the Illinois State Auditing Act. We have not audited any financial statements of the Authority for the purpose of expressing an opinion because the Authority does not, nor is it required to, prepare financial statements.

WILLIAM G. HOLLAND, Auditor General

WGH:KMC:dh

SPECIAL ASSISTANT AUDITORS

Our special assistant auditors were Bronner Professional Services, Inc.

DIGEST FOOTNOTES

#1 DISASTER CONTINGENCY PLAN WEAKNESS - Previous Agency Response

2007: “The Authority accepts this finding.”