Selected Community Health-Related IT Systems - 391-0593-22
Description of Agency
The Michigan Department of Health and Human Services (MDHHS) uses more than 80 information technology systems to collect and report various community health-related information. Our audit scope includes the following systems:
- Michigan Disease Surveillance System (MDSS)
- Newborn Screening Lab System (NBSLIM)
- StarLIMS
- Vital Events Registration Application (VERA)
According to the State of Michigan Financial Management Guide, MDHHS, as system and data owner, has primary responsibility for establishing, maintaining, and monitoring internal control over its critical IT applications and the environment in which it operates.
Agency Services, Department of Technology, Management, and Budget (DTMB), has primary responsibility for designing, implementing, and executing IT general controls. DTMB also develops, tests, and implements departments’ IT applications and associated IT common and technical application controls that incorporate departments’ business requirements. DTMB’s Center for Shared Solutions is responsible for the management of MILogin, the State’s identification, credential, and access management system. VERA and MDSS use MILogin for system access.
Audit Objective
To assess the sufficiency of MDHHS’s and DTMB’s security and user access controls over selected community health IT systems.
Timing
Estimated Release Date: March 31, 2023
← Back to all work in progress