Finding 2023-101: Homeowner Assistance Fund – Service Organization Controls Auditor Recommendation: Obtain the service organization audit report for the computer system used to administer the Homeowner Assistance Fund. Planned Corrective Action: The Wisconsin Department of Administration (Depar...
Finding 2023-101: Homeowner Assistance Fund – Service Organization Controls Auditor Recommendation: Obtain the service organization audit report for the computer system used to administer the Homeowner Assistance Fund. Planned Corrective Action: The Wisconsin Department of Administration (Department) has requested and will obtain the service organization audit report for the computer system used to administer the Homeowner Assistance Fund. Anticipated Completion Date: Immediately following the issuance of the service organization audit report for the period ended May 31, 2024, which is anticipated to be received not later than September 30, 2024. Auditor Recommendation: Complete a review of the service organization audit report, assess the effectiveness of the internal controls on the computer system maintained by the service organization, and document its review. Planned Corrective Action: The Department will develop the means to inform and document its review of the service organization audit report and its assessment of the effectiveness of the internal controls on the computer system maintained by the service organization. The Department will utilize those means to evidence reviews and assessments it completed but did not document as reported to and by the auditors, and for future received service organization audit reports, including the report that will be obtained for the period ended May 31, 2024. Anticipated Completion Date: June 30, 2024, as related to the development and use of the means to evidence prior completed but undocumented reviews and assessments, and within thirty days of receipt of the service organization audit report for the period ended May 31, 2024, which is anticipated to be received not later than September 30, 2024. Auditor Recommendation: Complete a review of the complementary user entity controls at the Department of Administration that are required to be in place for it to rely on the service organization audit report, document its review, and implement user entity controls, if needed. Planned Corrective Action: The Department will develop the means to inform and document its review of the complementary user entity controls at the Department that are required to be in place for it to rely on the service organization audit report, and will implement user entity controls, if needed. The Department will utilize those means to evidence the review of complementary user entity controls it completed but did not document as reported to and by the auditors, and for complementary user entity controls contained in future service organization audit reports, including the report that will be obtained for the period ended May 31, 2024. Anticipated Completion Date: June 30, 2024, as related to the development and use of the means to document the prior completed but undocumented review, and within thirty days of receipt of the service organization audit report for the period ended May 31, 2024, which is anticipated to be received not later than September 30, 2024. Persons responsible for corrective action: David Pawlisch, Administrator Division of Energy, Housing and Community Resources david.pawlisch@wisconsin.gov