2000-2001 Grand Jury Report

INFORMATION SERVICES MANAGEMENT

INTRODUCTION

 

The Information Services Division (ISD) is responsible for assisting the County Board of Supervisors, all county administrative offices, managers, and staff in improving work methods and productivity through the application and use of a variety of automated services and methodologies.  ISD maintains the integrity and security of official county information as the county conducts its business.  The county has 1,200 personal computers and 52 servers.  This does not include laptops.  The old data processing mainframe computer system was sold and has been removed.  ISD bills out actual costs; labor is on an hourly rate and comprises two-thirds of the budget of $800,000.  There are direct expenses:  utilities, software programs, license fees of  $400,000.  There is a financial license cost of $32,000 and a yearly Informax software program cost of $20,000. This software program only runs on a Hewlett Packard server that costs $15,000.  The Humboldt County Grand Jury has received several complaints concerning the computers and automated systems.

 

PROCEDURE

 

The grand jury surveyed several county offices regarding services and support of ISD problems pertaining to the following areas:  equipment/software, programming, output and maintenance/technical services.  Several department heads were interviewed, and a tour of the ISD was conducted.

 

FINDINGS

 

F-1      There appears to be a lack of overall security procedures in place; there have been

            reports of  missing or stolen computer equipment.

 

F-2      There are no personal background checks on ISD staff. 

           

F-3      ISD personnel have access to county personnel records, court records,  social services

            files, county financial accounts, mental health records, and other confidential files.

 

F-4      Witnesses reported that ISD lacks complete security procedures for security of

            information. 

 

F-5       At times, newly ordered computer equipment sits up to two months unopened; sometimes, the warranty has expired before computers were unpacked.

           

F-6      Some computer components were found to be missing and/or switched to other

            departments.  

 

F-7      Because of programming oversights during upgrading and conversions, there have

            been delays that have caused problems.

 

F-8       On more than one occasion, a programmer said, the specific job was completed and

             errors were still found, delaying work.

 

F-9       It was reported that there is a  lack of communication existing between programmers

            and users.

 

F-10     ISD has performed data base management and maintenance without communicating

            with user departments.

 

F-11    Witnesses testified that after going down, there are times it takes several days before

            servers are back on line or running properly.

 

F-12     It was reported that there are delays in rewriting programs and  installing them in a

            timely fashion.

 

F-13     It was reported that county departments are not getting timely technical services. 

 

F-14     The county lost data due to conversions of some systems;  the criminal justice system

            suffered loss of data during Y2K conversions.

 

F-15     Between printed pages, blank pages are produced in some office systems.  This is

            caused because ISD sets up for matrix printers when users have laser printers.

 

F-16     Because of an inefficient financial program, ISD is billing county offices different dollar

            amounts for the same period of time and services.

 

F-17     When the ISD "motherboard" goes down, most county office computers go down.

 

F-18     Computer users are not being advised when ISD is running program backups and/or

            program upgrades.

 

F-19     Several county departments are using other technical services rather than services

            provided by ISD.

 

F-20     There are conflicts between vendors and ISD when ISD alters or customizes licensed

            vendor software.

 

F-21     To avoid having user systems down during normal working hours, ISD procedure allows only off-hour access to vendors who wish to upgrade their systems and perform maintenance.

 

CONCLUSIONS

 

C-1      ISD has not effectively established procedures for overall security of computers and

            systems.

C-2      ISD is not effectively organized to provide all the services needed by the county.

 

C-3      ISD is not communicating effectively with user departments.

    

C-4      ISD technical services is not set up to support user departments adequately.

 

C-5      ISD does not have the equipment and/or procedures for back-up when

           systems go down.

 

C-6      Some county offices may not be able to accurately budget for their ISD charges.

                                      

RECOMMENDATIONS

 

THE HUMBOLDT COUNTY GRAND JURY RECOMMENDS THE FOLLOWING:

 

R-1      ISD establish procedures for overall security of computers and their systems.

 

R-2      ISD be restructured or decentralized to better serve the county.

 

R-3      Personnel require extensive background checks on all new ISD staff.

 

R-4      The County bond the current ISD staff.

 

R-5      The County acquire new accounting system so that county departments can accurately

            budget for computers and their systems.

 

R-6      County departments have stand-alone system servers with mirrored hard drives.

 

R-7      ISD establish procedures for security of information.

 

RESPONSES

 

THE FOLLOWING RESPONSES TO REPORT 01-02 ARE REQUIRED PURSUANT TO

P.C. 933 AND THE STANDARD FORMAT FOR RESPONSES.

 

1.         The Board of Supervisors respond to all findings and recommendations.

 

2.         The department head of Information Services Division respond to all findings and recommendations.