Management Response and Action Plan (MRAP) - Audit of Data Integrity - Lotus Notes APICS and Acquisition Card Applications

Help on accessing alternative formats, such as Portable Document Format (PDF), Microsoft Word and PowerPoint (PPT) files, can be obtained in the alternate format help section.

Audit of Data Integrity - Lotus Notes APICS and Acquisition Card Applications

Reccommendations	Management Response: Accept Accept with conditions Reject	Planned Management Action	Deliverables	Expected Completion Date	Accountability
It is recommended that the Chief Financial Officer as the Business Owner, in conjunction with the Chief Information Officer, Information Management Services Directorate, ensure that APICS and Acquisition card policies and procedures address procedures for periodic review and confirmation of access rights to the APICS/Acquisition Card databases. This also includes super user access and review.	Accept	The Framework for Integrated Resource Management Systems (FIRMS) has instituted a procedure, whereby the Access Control Lists for both the APICS and Acquisition Card databases are to be reviewed as part of the year-end procedures, over and above the ad-hoc reviews that occur whenever FIRMS are specifically asked to add or remove a user from the Access Control Lists	FIRMS year-end procedures updated to reflect this change.	Complete	Director General of Financial Operations CFOB