Territory Stories

February 2008 report to the Legislative Assembly

Details:

Title

February 2008 report to the Legislative Assembly

Collection

Report to the Legislative Assembly; Reports; PublicationNT

Date

2008

Description

Made available via the Publications (Legal Deposit) Act 2004 (NT).

Notes

Date:2008-02

Language

English

Subject

Northern Territory. Auditor-General's Office -- Periodicals; Finance, Public -- Northern Territory -- Accounting -- Periodicals; Northern Territory -- Appropriations and expenditures -- Periodicals

Publisher name

Northern Territory Auditor-General's Office

Place of publication

Darwin

ISSN

1323-7128

Copyright owner

Check within Publication or with content Publisher.

Parent handle

https://hdl.handle.net/10070/223559

Citation address

https://hdl.handle.net/10070/686148

Page content

70 Auditor-General for the Northern Territory February 2008 Report Department of Health and Community Services cont The audit recommended to the Agency that: The processes for purchase order and receiving functions within QANTEL be segregated via appropriate access profiling; The ability to add, modify and remove suppliers on QANTEL is restricted to appropriate personnel and that the users that have these rights are periodically reviewed; and The ability to add, modify and remove inventory master file details on QANTEL is restricted to appropriate personnel and that users that have these rights are periodically reviewed. Where it is not practical to system enforce the above, it should be ensured that the level of manual compensating controls is adequate. No formal change control procedures It was further noted that whilst no major changes to QANTEL have occurred recently, changes to QANTEL are currently not subject to formal change control procedures. A lack of formal change management procedures increases the risk that changes are not authorised, tested and approved by the Department of Health and Community Services prior to migration into the production environment. It was recommended to the Agency that consideration should be given to formalising the QANTEL change control procedures. This may include leveraging off other formal DHCS IT procedures. While agreeing with the finding the system owner noted that formalisation of changes may not be completely necessary as there have been minimal problems with Datagaard over the last 16 years. Datagaard are also responsible for testing changes in a test environment before they are approved by the system owner and placed into production.


Aboriginal and Torres Strait Islander people are advised that this website may contain the names, voices and images of people who have died, as well as other culturally sensitive content. Please be aware that some collection items may use outdated phrases or words which reflect the attitude of the creator at the time, and are now considered offensive.

We use temporary cookies on this site to provide functionality.
By continuing to use this site without changing your settings, you consent to our use of cookies.