¨ The Authority did not have a disaster contingency plan to promote recovery of its computer systems. In addition, a recovery test had not been performed and an alternative power source to safeguard against data loss in the event of a power failure did not exist.
(1) Excludes contractual employees: ’07 - 3; ’06 - 4; ’05 - 8.
The Authority did not have a disaster contingency plan to promote recovery of its computer system. In addition, a recovery test has not been performed and an alternative power source to safeguard against data loss in the event of a power failure did not exist.
The primary mission of the Authority is to improve the administration of justice by enhancing the information tools available to State and local criminal justice agencies and administrators. To accomplish this, the Authority maintains several essential computer systems. The loss of computer services will make these services to State and local law enforcement agencies unavailable. This finding has been repeated since 1987.
We recommended the Authority develop a comprehensive disaster contingency plan to address issues relevant to the continuance of services to users.
The other finding pertains to the failure to perform employee performance evaluations on a timely basis. We will review progress toward the implementation of our recommendations in our next examination.
We conducted a compliance attestation examination of the Illinois Criminal Justice Information Authority for the two years ended June 30, 2007 as required by the Illinois State Auditing Act. We have not audited any financial statements of the Authority for the purpose of expressing an opinion because the Authority does not, nor is it required to, prepare financial statements.
Our special assistant auditors were Duffner & Company, P.C.
2005: “The Authority accepts this finding. The two main components to an appropriate disaster recovery site are sufficient funding and proper location. Many large government agencies build their disaster recovery in another State. The Authority is not considering this type of plan. A complete disaster recovery location can be very expensive to build and then maintain. The majority of our past requests for funding of disaster recovery have not been approved. In spite of the lack of funding, we are exploring two possible options, one at a remote location approximately 100 miles from Chicago, the other being the newly planned Central Management Services disaster recovery center which is scheduled to be 250 miles from Springfield. Both would necessitate large start-up costs. Either potential site would necessitate funding approval.