Some actions are dependent on resource availability. Nine additional recommendations cannot be implemented until another major IT project is undertaken. Seven recommendations have been fully implemented. The IT Department is taking steps to implement the last 3 of 15 recommendations, with substantial implementation anticipated by the end of 2000. These recommendations address policies and procedures for password access, verifying reports, correcting errors, operating applications and managing the movement of programs from development, test and production.
Some actions are dependent on resource availability.
Three of the original nine recommendations are in progress and in some departments they are implemented. We believe these recommendations are not burdensome and should be actively pursued. The IT Department plans to fill two vacant positions and continues to evaluate automated tools, in an effort to satisfy user demands. However, staffing remains inadequate to develop a disaster recovery plan. The IT security policy has been developed, and is awaiting final approval.