The Legislative Post Audit Committee has directed our office to conduct ongoing information system audits as an adjunct to the division’s compliance and control audits. The current three-year plan started with a statewide assessment of what types of sensitive datasets the state maintains and which agencies are responsible for those data. The results of that audit formed the basis of a risk assessment we used to select agencies for agency-specific audits. This audit evaluated the state of information technology security in the selected agency.

The Information Technology Executive Council has adopted IT security standards for the state. This audit evaluated how well the selected agency adhered to about 100 ITEC requirements or best practices across twenty different information technology security areas.

This report is kept permanently confidential under K.S.A. 45-221(a)(12) & (45) because the information it contains could jeopardize the agency’s IT security if released. No corresponding public report has been issued.

The Legislative Post Audit Committee has directed our office to conduct ongoing information system audits as an adjunct to the division’s compliance and control audits. The current three-year plan started with a statewide assessment of what types of sensitive datasets the state maintains and which agencies are responsible for those data. The results of that audit formed the basis of a risk assessment we used to select agencies for agency-specific audits. This audit evaluated the state of information technology security in the selected agency.

The Information Technology Executive Council has adopted IT security standards for the state. This audit evaluated how well the selected agency adhered to about 100 ITEC requirements or best practices across twenty different information technology security areas.

This report is kept permanently confidential under K.S.A. 45-221(a)(12) & (45) because the information it contains could jeopardize the agency’s IT security if released. No corresponding public report has been issued.

The Legislative Post Audit Committee has directed our office to conduct ongoing information system audits as an adjunct to the division’s compliance and control audits. The current three-year plan started with a statewide assessment of what types of sensitive datasets the state maintains and which agencies are responsible for those data. The results of that audit formed the basis of a risk assessment we used to select agencies for agency-specific audits. This audit evaluated the state of information technology security in the selected agency.

The Information Technology Executive Council has adopted IT security standards for the state. This audit evaluated how well the selected agency adhered to about 100 ITEC requirements or best practices across twenty different information technology security areas.

This report is kept permanently confidential under K.S.A. 45-221(a)(12) & (45) because the information it contains could jeopardize the agency’s IT security if released. No corresponding public report has been issued.