To ensure accountability and independence between the provision of IPO and IV&V services on future IT projects, by September 2016 CalVet should establish a policy requiring it to use separate contractors for IPO and IV&V services when IPO services are not provided directly by the Technology Department.
CalVet has developed CalVet IT Policy #ISD-16-001 to ensure IPO and IV&V services on future IT projects use separate contractors/providers for each service. The policy has been disseminated to all staff.
†Response Type refers to the interval in which the auditee is providing the State Auditor with their status in implementing recommendations made in an audit report. Auditees must submit a response regarding their progress in implementing recommendations from our reports at three intervals from the release of the report: 60 days, six months, and one year or subsequent to one year.
*Agency responses received after June 2013 are posted verbatim.