The following recommendations are outstanding and not yet ready for follow-up audits:
Guidance to implement information technology control frameworks—April 2008, no. 7, p. 170
We recommend that the Ministry of Service Alberta, in conjunction with all ministries and through the Chief Information Officer Council, develop and promote:
- a comprehensive information technology control framework, and accompanying implementation guidance
- well-designed and cost-effective information technology control processes and activities.
Access and security monitoring of the revenue application systems—October 2008, p. 346
We recommend that the Ministry of Service Alberta ensure adequate logging and monitoring processes are in place in all application systems that host or support financial information and Albertans’ personal information.
System conversion process—October 2008, p. 349
We recommend that the Ministry of Service Alberta document its review of actual system-conversion activities to ensure that they comply with the approved test plan for system conversion and data migration.
Information technology resumption plan—October 2009, no. 35, p. 311
We recommend that the Ministry of Service Alberta complete and test an information technology resumption plan.
Payroll review processes—October 2009, p. 312
We recommend that the Ministry of Service Alberta improve its process to provide timely supporting documentation on payroll information that it maintains for itself and its client ministries.
Ranking of non-compliance at registry agencies—October 2012, no. 27, p. 133
We recommend that the Ministry of Service Alberta rank the significance of findings it identifies at registry agencies and document its follow-up processes.