Finding 2025-025 Coronavirus State and Local Fiscal Recovery Funds, ALN 21.027 - PTMS Security Management and Access Controls Management Views MDOT agrees that security management and access controls should be fully established for the Public Transportation Management System (PTMS). Planned Correcti...
Finding 2025-025 Coronavirus State and Local Fiscal Recovery Funds, ALN 21.027 - PTMS Security Management and Access Controls Management Views MDOT agrees that security management and access controls should be fully established for the Public Transportation Management System (PTMS). Planned Corrective Action Because PTMS is a legacy system that is being retired, MDOT will not re-create historical user data that was deleted due to a system limitation. Rather, MDOT EIM and the MDOT Office of Passenger Transportation (OPT) will collaborate and provide oversight to ensure that the new system, the Public Transportation Information Management System (PTIMS), which is scheduled for full implementation August 31, 2026, has fully established security management and access controls and that there is pertinent documentation regarding users’ roles. Also, EIM and OPT will continue to ensure that PTMS, and PTIMS after its implementation, user access is reviewed at least annually in accordance with SOM Technical Standard 1340.00.040.01 (Audit and Accountability Standard). Under the existing process, the designated system security administrators obtain, verify, and document the written approval for all identified users, and access is modified/removed timely and as appropriate based on responses received or removed when no response is received. Anticipated Completion Date September 2026 Responsible Individual(s) Sandy Lovell, MDOT Gina Huhn, MDOT Jean Ruestman, MDOT Kyle Nelson, MDOT Andy Esch, MDOT