Auditor Suzanne M. Bump, in an audit released today, provided recommendations to the Massachusetts Department of Transportation (MassDOT) Aeronautics Division to improve its protocols related to IT project management, governance, and security.\n\nThe audit found that ineffective project management resulted in the Aeronautics Division abandoning a recently developed web-based application that facilitates the management of facility information, projects and grants and other activity data across the MassDOT system, because it did not meet the Divisions\u2019 business needs. The Aeronautics Division spent over $650,000 developing the application. The audit pointed to a lack of expertise in IT project management as the cause of the deficiencies. In its response, the Division noted that it is in the process of developing a replacement software application, and using an experienced project manager and business analyst to guide the development.\n\n\u201cTechnology plays a vital role in the work of government, but agencies often have difficulty getting systems to actually fit their needs. This audit showed that, like many state government agencies, the Massachusetts Department of Transportation\u2019s Aeronautics Division is struggling to successfully integrate technology into its work,\u201d Bump said of the audit. \u201cI commend the Aeronautics Division for taking quick action to address the problems identified in this audit, and urge them to take steps to ensure additional tax dollars are not wasted.\u201d\n\nAdditionally, the audit noted several IT security weaknesses in the Aeronautics Division. The audit found that no employee of the Division had received required security-awareness training. It also found many users of the application had security permissions that allowed them to access and alter information that they had no business need to alter. This could have resulted in inappropriate and unauthorized alteration of information.\n\nFinally, the audit found deficiencies identified in a previous audit remain. The Aeronautics Division has not developed, documented, and tested a plan to ensure is operations could continue in the event of a business interruption.\n\nThe audit was conducted as part of Bump\u2019s\u00a0efforts to ensure state government entities keep pace with technological innovation.\n\nThe audit released to the public is abridged because of the sensitivity of the information contained in the full audit. Consistent with government auditing standards and the Massachusetts public records law, only the Aeronautics Division will receive a full, unabridged copy of the report.\n\nThe Aeronautics Division has jurisdiction over 36 of the Commonwealth\u2019s 39 public-use airports.\n\nThe audit of the Massachusetts Department of Transportation Aeronautics Division\u2014Information Technology\u00a0is available here.