2015-02 Performance Audit Report: County of Hawai'i Information Technology Asset Management

Home

County of Hawaii Introduction Background The County of Hawaii (the "County") Department of Information Technology ("DIT") is responsible for managing and supporting the County's approximately 1,200 computers in their central computer system and telecommunications network. DIT is also responsible for coordinating the purchase and use of computer equipment and software and for providing technology support and user training to County employees. DIT is not responsible for managing or supporting the Department of Water Supply, Police Department, Office of Housing and Community Development, Office of the Prosecuting Attorney and the Office of Aging since these departments have their own internal information technology ("IT") function. DIT conducts quarterly meetings with these departments for information sharing and collaboration. DIT does not have a dedicated IT Asset Management position that manages the IT asset management budget at the County level; individual departments manage their own IT asset management budgets. The County's Department of Finance tracks IT assets in its fixed assets inventory system. IT asset procurement follows the Department of Finance Purchasing Manual that allows individual departments to process purchases up to $1,000. The Purchasing Division, under the Department of Finance, processes purchases greater than $1,000. DIT consists of twenty employees and includes a user support and systems support function. A strategic goal for DIT is to standardize and secure the County's computing environment by restricting County employees from installing software without DIT involvement and by implementing an automated network and software inventory system and an automated software deployment tool. Objective and Scope The objectives of the audit were to: 1. Determine whether the DIT's hardware lifecycle management policies and procedures follow industry best practices, including but not limited to: • Hardware lifecycle management • Hardware inventory management • Hardware security management 2. Determine whether DIT's software licensing management system is adequate to ensure compliance with current applicable licensing agreement terms and conditions. In addition, to determine if the software licensing management system follows industry best practices, including, but not limited to: • Software lifecycle management • Software inventory management • Software security management