Organization: | Office of the State Auditor |
---|---|
Date published: | July 9, 2024 |
Executive Summary
In accordance with Section 12 of Chapter 11 of the Massachusetts General Laws, the Office of the State Auditor has conducted a performance audit of certain activities of Commonwealth Corporation (CommCorp) for the period July 1, 2020 through June 30, 2022.
The purpose of our audit was to determine the following:
- whether CommCorp ensured that YouthWorks grant recipients met the program participant eligibility and reporting requirements in Sections V and IX (for fiscal year 2021) and Sections III and VII (for fiscal year 2022) of CommCorp’s YouthWorks “Program Administration and Management Guide”;
- whether CommCorp tracked each YouthWorks program participant’s employment status after the completion of each program cycle to assess whether the program achieved its goal of helping program participants secure unsubsidized employment, in accordance with Section VIII (for fiscal year 2021) and Section VII (for fiscal year 2022) of CommCorp’s YouthWorks “Program Administration and Management Guide” and Section 116(b)(2)(A) of the Workforce Innovation and Opportunity Act of 2014; and
- whether CommCorp ensured that its employees completed cybersecurity awareness training, in accordance with Sections 6.2.3 and 6.2.4 of the Executive Office of Technology Services and Security’s (EOTSS’s) Information Security Risk Management Standard IS.010.
Below is a summary of our findings and recommendations, with links to each page listed.
Finding 1 | CommCorp did not consistently collect or analyze employment outcome data related to its YouthWorks program participants. |
Recommendations |
|
Finding 2 | CommCorp did not ensure that YouthWorks grant recipients obtained eligibility documentation and accurately recorded program participant information. |
Recommendations |
|
Finding 3 | CommCorp did not ensure that its employees completed cybersecurity awareness training. |
Recommendations |
|
Finding 4a | CommCorp did not have documented management approval for employees’ access rights to its YouthWorks database. |
Finding 4b | CommCorp could not provide evidence that it promptly revoked former employees’ access rights to its YouthWorks database. |
Recommendations |
|
Table of Contents
- Overview of Audited Entity
- Objectives, Scope, and Methodology
-
- Commonwealth Corporation Did Not Consistently Collect or Analyze Employment Outcome Data Related to Its YouthWorks Program Participants
- Commonwealth Corporation Did Not Ensure That YouthWorks Grant Recipients Obtained Eligibility Documentation and Accurately Recorded Program Participant Information
- Commonwealth Corporation Did Not Ensure That Its Employees Completed Cybersecurity Awareness Training
- Commonwealth Corporation Had Inadequate Access Controls for Its YouthWorks Database
Downloads
-
Open PDF file, 870.8 KB, Audit Report - Commonwealth Corporation (English, PDF 870.8 KB)
Contact
Phone
Online
Fax
Address
Room 230
Boston, MA 02133