Department of Corrections and Rehabilitation - Operations Manual

Chapter 4 – Information Technology

Article 11 – Project Reporting Requirements

View All Sections >

44020.4 Project Reporting Requirements‑Audit of Information Technology Projects

  • All information technology projects are subject to audit, with project reporting and evaluation documents being an essential aspect of the audit trail (SAMState Administrative Manual Section 4943). CDC is subject to project audits by control agencies as well as internal audits. Documentation supporting project decisions shall be kept by the Department in the central clearinghouse for a minimum period of two years following approval of the post-implementation assessment.

  • Nondelegated Projects

    • OITOffice of Information Technology audits project reporting documentation in conjunction with its audit and oversight responsibilities.

  • Delegated Projects

    • For delegated projects, the MISManagement Information Systems Committee shall determine when an audit is to be conducted, the scope of the audit, and who shall perform the audit.