To improve these processes, the audit recommends MOITI ensure its employees are aware of STEP requirements and review the current information it has for businesses that have received STEP financial assistance awards and rectify any inaccuracies.
The audit found the Aeronautics Division does not have a business continuity plan (BCP) or an internal control plan (ICP). The audit also noted that not all employees signed acceptable use policies and/or completed cyber security awareness training.
Additionally, the audit found DHE did not meet annually with the Commonwealth Commitment Advisory Board (CCAB) to review key aspects of the MassTransfer Commonwealth Commitment program.