Responsible Person(s): Liz Havenner, IT Administrative Director; Dan Lewis, Chief Technology Officer; Timothy Kelly, Innovation, Architecture and Governance Director; John Vosper, Assistant Director ISRM; James Pell, ARMICS Manager; Paige Elswick, Controller; Ida Witherspoon, Chief Financial Officer...
Responsible Person(s): Liz Havenner, IT Administrative Director; Dan Lewis, Chief Technology Officer; Timothy Kelly, Innovation, Architecture and Governance Director; John Vosper, Assistant Director ISRM; James Pell, ARMICS Manager; Paige Elswick, Controller; Ida Witherspoon, Chief Financial Officer; Michelle Skaggs, General Services Director; Adrienne Childress, Strategic Sourcing Procurement Manager, General Services, Procurement Corrective Action Planned: DSS is working to compile SOCs and train contract administrators through specific SOC related sessions. Procedures, training, questionnaire, and policy completed. DSS Finance and IT Administration has created draft Policy and Procedures for managing SOC 1 reports for third-party service providers, incorporating SOC 1 & SOC 2 requirements. The policy outlines steps for obtaining, reviewing, and documenting SOC reports, including timelines and responsibilities for contract administrators, TSD Business Managers, and the ARMICS program. It also addresses remediation processes for non-compliant or incomplete reports. The policy is designed to ensure compliance with relevant regulations and will be reviewed and updated annually by the DSS ISRM and Finance team. Training is being developed as well on the procedures to be followed for SOC 1 Type 2 review. Estimated Completion Date: 6/30/2026