2013-2016 Technology Plan - Osceola County School District

Management Information Systems
Administrative and Instructional Technology
14Segregation of Duties: The district segregates duties to reduce the risk
that unauthorized transactions will be entered and not discovered
quickly.
The Information and Technology Services Department is an independent group
responsible for data processing. System security does not allow the Information and
Technology Services personnel access to transaction input. Security for input transactions
is maintained by the Finance Department. No recommendation.
Data processing - development
The Information and Technology Services Department is independent of the organizations that depend on
it for data. The Information and Technology Services director is responsible for approving new
development. Development entails analysis, coding, and requires thorough testing. Newly developed
applications are tested first in the test environment and then moved into the production environment only
after customers have had a chance to thoroughly test the new application.
Security
The Network Communications Specialist for Networking maintains LAN/WAN network access. Various
applications residing on networked file servers have been assigned to staff in that department to maintain,
including security. The Information Services Systems analyst maintains AS 400 system access. AS 400
application security is also maintained by a designated a person at the district. A formal request is made
for user access to both the student information and finance applications in TERMS. This formal request
is then processed and the user is granted access. When employees are terminated network and application
access is denied. Reports can be printed to show users and the authorities they are granted.
15User Controls: The district’s user controls ensure authorization prior to
processing transactions and ensure all output represents authorized and
valid transactions.
The district has procedures in place to insure that information entered into the AS 400
business applications are authorized, accurate and input only once. No recommendation.
Authorization
To enter a transaction, a user must log into the network with a valid user id and password. Once logged
into the network the AS 400 restricts usage of TERMS based on user id and password. Authorization to
access a specific application depends upon the users function. Users are given levels of access depending
on what their role in the organization is. For example, data entry clerks who have read, write and delete
privileges in the Student Information System may not have access to the Financial Information System.
Other users have access to both systems but are only permitted to view the data or print reports and are
not allowed to make changes to the data.
OPPAGA 6-35
2013 Educational Technology Plan 35/40 School District of Osceola County Florida