Ill. Auditor General: 'Department of Central Management Services, Teacher Health Insurance Security Fund – Financial Audit'

SPRINGFIELD, Illinois, April 7 -- The Illinois Auditor General issued the following financial audit on April 6, 2023, involving the Department of Central Management Services, Teacher Health Insurance Security Fund.

Here are excerpts:

* * *

FINDINGS, CONCLUSIONS, AND RECOMMENDATIONS

INADEQUATE CONTROLS OVER CHANGE MANAGEMENT

The Department of Central Management Services (Department) did not have sufficient controls over their change management procedures.

Change control is the systematic approach to managing changes to an IT environment, applications, or data. The purpose is to prevent unnecessary and/or unauthorized changes, ensure all changes are documented, and minimize any disruptions due to system changes. The Department was unable to provide a complete and accurate population of changes for applications maintained by the Department; therefore, we were unable to perform any testing of the internal controls over changes to the applications and data. (Finding 1, pages 24-25)

We recommended the Department implement controls in order to track the changes made to their applications and data.

The Department agreed with the finding and stated it will work with the Department of Innovation and Technology (DoIT) to obtain the information needed to implement the controls necessary for tracking changes made to its applications.

* * *

AUDITOR'S OPINION

The auditors stated the financial statements of the Department of Central Management Services, Teacher Health Insurance Fund as of and for the year ended June 30, 2022, are fairly stated in all material respects.

This financial audit was conducted by Sikich LLP.

* * *

The report is posted at: www.auditor.illinois.gov/Audit-Reports/Compliance-Agency-List/CMS/THISF/FY22-CMS-THISF-Fin-Digest.pdf