Information Technology Disaster Recovery Follow-up
Technology Services fully implemented seven of eight recommendations made in the original audit report and partially implemented one.
Because of this, Technology Services will be better equipped to recover data during a disaster and has reduced the risk of losing critical systems. Improvements include adding other agencies to the Disaster Recovery Committee, developing a charter, and updating and reviewing disaster recovery documentation, incorporating the new data center into disaster recovery plans, and providing training.
Remaining Risks
The recommendation Technology Services partially implemented will address some of the risk related to backup metrics. However, because backup metrics have not been documented in a backup policy, the risk remains that staff responsible for performing these duties may not be aware of their responsibilities.
Auditor's Letter
October 5, 2023
In keeping with generally accepted government auditing standards and Auditor’s Office policy, as authorized by city ordinance, we have a responsibility to monitor and follow up on audit recommendations to ensure city agencies address audit findings through appropriate corrective action and to aid us in planning future audits.
After following up on the “Information Technology Disaster Recovery” audit report issued in May 2021, we determined the Technology Services agency fully implemented seven of the recommendations it agreed to and partially implemented one.
During the original audit, we found Technology Services had an insufficient disaster recovery strategy which resulted in inadequate governance, a disaster recovery program that lacked documentation and maintenance, and insufficient communication and training strategies.
Based on our follow-up work, we determined the Technology Services agency did not fully address all the risks associated with our initial findings. Consequently, we may revisit these risk areas in future audits to ensure the city takes appropriate corrective action.
We appreciate the leaders and team members at Technology Services who shared their time and knowledge with us throughout the audit and the follow-up process. Please contact me at 720-913-5000 with any questions.
Denver Auditor's Office
Timothy O'Brien, CPA
AUDITOR TIMOTHY O'BRIEN, CPA
Denver Auditor
Denver Auditor´s Office
201 W. Colfax Ave. #705 Denver, CO 80202
Email: auditor@denvergov.org
Call: 720-913-5000
Follow us on Facebook Connect with us on Twitter
Read our social media policy
