Report I2019-3 Recommendation 25 Responses
Report I2019-3: Investigations of Improper Activities by State Agencies and Employees: Wasteful and Improper Travel Payments, Improper Promotion and Hiring Practices, and Misuse of State Resources (Release Date: May 2019)
Case Number I2017-1487
Recommendation #25 To: Corrections and Rehabilitation, Department of
CDCR should implement safeguards through which a supervisor would receive notifications when a subordinate employee bypasses established thresholds of access to credential-requiring Internet locations.
Agency Response From December 2019
CDCR reported its implementation of this recommendation through several key actions. First, in November 2019 CDCR reviewed the list of "Top 25" Internet data users at Valley State Prison and asked the managers of every staff member listed to conduct an inquiry into their staff's Internet use. CDCR reported in December 2019 that the results showed that the Internet use was "within the scope of staff's normal work assignments and duties."
Second, CDCR stated that Valley State Prison conducted an audit in November 2019 of all staff approved for limited and unlimited access to the Internet. The managers for these employees were asked to review the employee's access to gauge the appropriateness of their access. As a result of the audit, the prison removed Internet access for 22 employees.
Third, Valley State Prison completed training for its supervisors, managers, and executives on the appropriate and inappropriate use of the Internet by subordinate staff. The training also discussed the importance of conducting regular staff meetings regarding CDCR's expectations.
Finally, CDCR stated that Valley State Prison plans to review the "Top 25" list monthly to ensure that Internet use is properly monitored.
California State Auditor's Assessment of Status: Fully Implemented
Agency Response From October 2019
After we inquired in August 2019 about when we could expect a substantive update about CDCR's progress on implementing this recommendation, CDCR stated that it forwarded our request to its management.
California State Auditor's Assessment of Status: Pending
Agency Response From July 2019
CDCR stated that it did not have any new information to report regarding its progress on this recommendation since April 2019.
California State Auditor's Assessment of Status: Pending
Agency Response From April 2019
CDCR stated that its current Internet filtering program is able to produce a report of each institution's top 25 Internet data users. CDCR indicated that it is exploring the use of this report, as well as other methods, to hold its employees accountable.