Report 2014-602 Recommendations

When an audit is completed and a report is issued, auditees must provide the State Auditor with information regarding their progress in implementing recommendations from our reports at three intervals from the release of the report: 60 days, six months, and one year. Additionally, Senate Bill 1452 (Chapter 452, Statutes of 2006), requires auditees who have not implemented recommendations after one year, to report to us and to the Legislature why they have not implemented them or to state when they intend to implement them. Below, is a listing of each recommendation the State Auditor made in the report referenced and a link to the most recent response from the auditee addressing their progress in implementing the recommendation and the State Auditor's assessment of auditee's response based on our review of the supporting documentation.

Recommendations in Report 2014-602: High Risk Update—California Department of Technology: Lack of Guidance, Potentially Conflicting Roles, and Staffing Issues Continue to Make Oversight of State Information Technology Projects High Risk (Release Date: March 2015)

:
Recommendations to Technology, California Department of
Number Recommendation Status
1

By December 2015 CalTech should develop and adopt criteria to guide the type and degree of intervention it will take to prevent IT projects with significant problems from continuing without correction, including when and how IPO analysts should recommend corrective action and escalate issues to CalTech's management.

Fully Implemented
2

By December 2015 CalTech should develop and adopt criteria to guide the type and degree of intervention it will take to prevent IT projects with significant problems from continuing without correction, including when and what CalTech should require that sponsoring agencies perform as remedial actions, and what sanctions CalTech will impose for noncompliance with these remedial actions.

Fully Implemented
3

By December 2015 CalTech should develop and adopt criteria to guide the type and degree of intervention it will take to prevent IT projects with significant problems from continuing without correction, including what conditions could trigger CalTech to consider suspending or terminating an IT project.

Fully Implemented
4

To clarify and reinforce its oversight authority with sponsoring agencies, by December 2015 CalTech should develop a method to formally document and communicate its expectations with the sponsoring agencies whose projects are under CalTech's oversight.

Fully Implemented
5

To help ensure the independence and objectivity of IPO analysts working in the oversight and consulting division, CalTech should develop a policy outlining expectations for independence and objectivity while performing oversight of IT projects.

Fully Implemented
6

To help ensure the independence and objectivity of IPO analysts working in the oversight and consulting division, CalTech should provide regular training regarding maintaining independence while conducting project oversight.

Fully Implemented
7

To better track its oversight actions and sponsoring agencies' responses to these actions, CalTech should retain the briefing documents created for the State CIO's portfolio meetings and the project status reports that sponsoring agencies submit while project oversight is ongoing.

Fully Implemented
8

To better track its oversight actions and sponsoring agencies' responses to these actions, CalTech should record action items from all portfolio meetings.

Fully Implemented
9

To ensure that the sponsoring agencies' project status reports provide a reliable and consistent assessment of an IT project's progress, CalTech should develop and adopt specific standards that describe how to calculate and report the project's current status.

Fully Implemented
10

To attract and retain employees with appropriate experience and qualifications to perform IT project oversight, CalTech should continue its efforts to gain approval to modify and use the project manager classification for the IPO analyst role.

Resolved
11

To ensure that it provides the appropriate level of oversight for IT projects under development, by December 2015 CalTech should conduct a workload assessment to determine the level of staffing and expertise required for each IT project it oversees.

Fully Implemented
12

Using the workload assessment that we recommended CalTech complete by December 2015, CalTech should make decisions to assign staffing to oversee each IT project. This staffing could include contracted IPO consultants in those situations when CalTech staff either are unavailable or lack the expertise needed.

Fully Implemented
13

To improve its oversight training, by June 2015 CalTech should continue to implement a consistent and repeatable training plan for IPO analysts, which includes contract management, project assessment, IT systems engineering, and maintaining independence.

Fully Implemented
14

By June 2015 CalTech should put in place a system to track IPO analysts' training hours to ensure that all IPO analysts have completed the necessary California Project Management Methodology training curriculum.

Fully Implemented


Print all recommendations and responses.