View Highlights (pdf)
View Report (pdf)
The audit of Intelligent Transportation Systems (ITS) was performed to evaluate ITS general and application controls. Intelligent transportation systems include a variety of technologies applied to monitor, evaluate, operate, and manage transportation systems. The City Auditor’s Office contracted with Grant Thornton LLP to perform the technical review.
Auditors observed that the Traffic Management Center, which manages ITS, is fairly mature in practice and can meet its day-to-day operational needs. However, risks surrounding ITS have not been adequately identified, evaluated and managed and several areas in IT governance and management could be improved.
The TMC does not have a documented risk management process, and it is not otherwise apparent that potential risks have been adequately assessed. The audit found that the TMC should take a more proactive role in managing security risks, including working with the City’s central IT department to better define roles and responsibilities over security management. Also, access controls can be improved to protect TMC computers, servers, and applications. Business continuity and disaster recovery plans have not been established, but these are currently in progress.
The audit also found that few policies and procedures have been formalized, and vendor service agreements have not been properly maintained and managed. As well strategic planning and use of additional performance data may help ITS more effectively plan for future improvements.