REPORT DIGEST GOVERNORS STATE UNIVERSITY FINANCIAL AUDIT FOR THE YEAR ENDED JUNE 30, 2024 Release Date: March 27, 2025 FINDINGS THIS AUDIT: 1 CATEGORY: NEW -- REPEAT – TOTAL Category 1: 0 -- 0 -- 0 Category 2: 0 -- 1 -- 1 Category 3: 0 -- 0 -- 0 TOTAL: 0 -- 1 -- 1 FINDINGS LAST AUDIT: 1 State of Illinois, Office of the Auditor General FRANK J. MAUTINO, AUDITOR GENERAL To obtain a copy of the Report contact: Office of the Auditor General, 400 West Monroe, Suite 306, Springfield, IL 62704-9849 (217) 782-6046 or TTY (888) 261-2887 This Report Digest and Full Report are also available on the worldwide web at www.auditor.illinois.gov INTRODUCTION This digest covers the Governors State University’s (University) Financial Audit as of and for the year ended June 30, 2024. The University’s Single Audit covering the year ended June 30, 2024 was separately released. The University’s State Compliance Examination covering the year ended June 30, 2024, will be separately released at a later date. SYNOPSIS • (24-01) The University did not have adequate controls around its change control process and had not adequately controlled developer access to its production environment. FINDINGS, CONCLUSIONS, AND RECOMMENDATIONS WEAKNESSES IN CHANGE CONTROL PROCESSES The University did not have adequate controls around its change control process and had not adequately controlled developer access to its production environment. The University established a change management process describing the process from initiation until post-implementation review. However, during the review of the University’s change control policies and procedures, we noted the following: • The change policy did not describe standard testing and documentation requirements for each type of change. • Developers had access to the production environment, resulting in a segregation of duties weakness. (GAS Report, Finding 1, Pages 5-6) We recommended the University update its policies and procedures to describe testing and documentation requirements for each type of change. Further, we recommended the University strengthen controls to ensure proper segregation of duties are established by restricting developers’ access to the production environment. University officials agreed with the finding and stated the University has been working to address the issues identified. AUDITOR’S OPINION The auditors stated the financial statements of the University as of and for the year ended June 30, 2024 are fairly stated in all material respects. This financial audit was conducted by Adelfia, LLC. COURTNEY DZIERWA Division Director This report is transmitted in accordance with Section 3-14 of the Illinois State Auditing Act. FRANK J. MAUTINO Auditor General FJM:JGR