COM 0261.000 2020-2022 - Laserfiche WebLink

Home

Report Highlights May 20, 2021 County of Hawaii Information Technology Asset Management Follow-Up Original Audit Follow-Up Audit What we found In November of 2015, the Office of the County Auditor Two key elements of IT asset management issued the audit of the County of Hawaii Information are the centralization of the IT function and Technology Asset Management and made eleven the use of an IT asset management role. recommendations. Without these two elements, the County is at an increased risk of security concerns, system Management generally agreed with the comments instability, and helpdesk inefficiencies. and status of recommendations. What we recommended Objective We identified the following recommendations To determine if the Department of Information for management to meet best practices: Technology implemented the 2015 IT asset 1. DIT should own all IT assets. Furthermore, management recommendations. an IT asset management role should be established to manage the County's IT Status of Recommendations assets including: We tested eleven recommendations and found that • Developing a financial forecast of management took corrective action as follows: hardware and software upgrades and replacements; • Implemented: 4 • Maintaining an approved software list • In Process: 6 for standardization; • Not Implemented: 1 • Identifying re-deployable IT assets; • Continuing to evaluate leasing as an Hardware & Software Lifecycle Management option; • Upgrades & Replacements: (1) In Process • Maintaining a listing of IT assets and • Purchase Request & Approval: the assigned users in a centralized (1) In Process and (1) Implemented database; • Redeployment of Assets: (1) In Process • Centrally receiving and accepting all • Leasing: (1) Implemented IT assets; Hardware & Software Inventory Management • Reconciling IT assets in the IT asset management inventory; and • Centralized Management System: Ensuring the disposal of IT assets (1) Implemented and (1) In Process • • Receiving & Accepting: (1) In Process occurs in a secured manner. 2. The County should address gaps in formal • Annual Physical Inventory: (1) Not Implemented written policies and procedures over IT Hardware & Software Security practices. • Secured Disposal: (1) In Process and (1) Implemented This audit was conducted in accordance with generally accepted government auditing standards.