Department of Economic Security—Information Security (July 2005, Report No. 05-04) 

The Department needs to strengthen information security controls to ensure that it consistently adheres to state-wide security standards.  Specifically, the Department should continue its efforts to strengthen controls related to user access, protection of local area networks, and documentation of computer program changes.  Finally, although the Department has made progress in disaster recovery planning, a comprehensive solution will require state-wide planning.