Department staff has reviewed the Legislative Audit Bureau’s (LAB) interim audit memo for Finding 2025-303: WIC Supplemental Nutrition Program for Women, Infants, and Children – Service Organization Controls. This is the department’s Corrective Action Plan. Recommendation (2025-303): WIC Supplemen...
Department staff has reviewed the Legislative Audit Bureau’s (LAB) interim audit memo for Finding 2025-303: WIC Supplemental Nutrition Program for Women, Infants, and Children – Service Organization Controls. This is the department’s Corrective Action Plan. Recommendation (2025-303): WIC Supplemental Nutrition Program for Women, Infants, and Children – Service Organization Controls. We recommend the Wisconsin Department of Health Services: • Develop and document procedures to complete an annual assessment of the controls in place by each contractor that provides support and security for an IT system used in administering the WIC Special Supplemental Nutrition Program for Women, Infants, and Children program, including the support provider, the cloud provider, and the EBT provider; • Obtain annually available service organization controls audit reports and perform an annual review that includes an assessment of the identified internal control deficiencies and a determination of whether the relevant complementary user entity controls are implemented; and • Prepare and maintain documentation of its annual review and assessment. Wisconsin Department of Health Services Planned Corrective Action: In partnership with DHS’s Information Security Section (ISS), the WIC Program will develop and document procedures to complete an annual assessment of security controls. The WIC Program will annually request SOC reports from all vendors. ISS will review SOC reports identifying deficiencies and risks and ensuring the user entity controls are addressed. DHS will then prepare and maintain documentation of its annual SOC reviews and assessments. Anticipated Completion Date: June 1, 2026 Persons responsible for corrective action: Kari Malone, Section Manager WIC and Nutrition Section, Division of Public Health kari.malone@dhs.wisconsin.gov