San Joaquin County Grand Jury
• 2020-2021
Independent Special Districts Transparency “Not Found”*
⚠️ Translation Notice: This content has been automatically translated. The original English text is the official version. Translation may contain errors.
⚠️ Este contenido ha sido traducido automáticamente. El texto original en inglés es la versión oficial. La traducción puede contener errores.
Findings and Recommendations 21 findings
F1
1 SB 929. Not all elements of SB 929 compliance are present on the district website, negatively
Related Recommendations (1)
R1
1 By March 31, 2022, comply with SB 929. Provide proof of exemption when relevant.
F2
1 districts, making it difficult for the public to find information about those districts. There is no comprehensive central directory from which the public can access information
Related Recommendations (1)
R2
1 (SJ-IS) to create a webpage on the LAFCO website that lists all independent special districts within the boundaries of the county and provide a link to a standard summary page for each district. By March 31, 2022, on the summary webpage for each district, LAFCO provide at least the
F3
1 There is no easy access from the county website to the websites of independent special districts, making it difficult for the public to find information about those districts.
Related Recommendations (1)
R2
1 (SJ-IS) to create a webpage on the LAFCO website that lists all independent special districts within the boundaries of the county and provide a link to a standard summary page for each district. By March 31, 2022, on the summary webpage for each district, LAFCO provide at least the
F4
1 easily accessible to the public. The brief financial summaries derived from the audits by the Auditor-Controller's Office are
Related Recommendations (1)
R4
1 special district audits to be submitted in an electronic form. By December 31, 2021, make all electronic independent special district audits going forward
F5
1 quality services that can be shared with independent special districts. The county's robust implementation of its cyber strategy would be difficult for most
Related Recommendations (1)
R5
1 available services, benefits, costs, and sample MOUs, and distribute to all independent special districts. By March 31, 2022, the San Joaquin County Information Systems Division, in conjunction
F1.1
SB 929. Not all elements of SB 929 compliance are present on the district website, negatively
No recommendations for this finding
F1.2
impacting public transparency. Imprecise links to the State Controller's Office website for financial transactions and board
No recommendations for this finding
F1.3
compensation make the website harder to use. The financial transactions on the State Controller's Office website do not provide an easily
No recommendations for this finding
F1.4
understood picture of the district's finances. The San Joaquin County Auditor-Controller's Office has audits and financial summaries for
No recommendations for this finding
F1.5
most districts that provide a more complete picture of the finances.
No recommendations for this finding
F1.6
The district could achieve higher levels of functionality and security on its website by leveraging the IS services of the county or other entity that has focused software for special districts.
No recommendations for this finding
F2.1
districts, making it difficult for the public to find information about those districts. There is no comprehensive central directory from which the public can access information
No recommendations for this finding
F2.2
on their independent special districts, making such information difficult to find. The public would benefit from the addition of the following to the LAFCO website
No recommendations for this finding
F2.3
District website link; Link to latest Municipal Service Review; Link to latest Sphere of Influence study; Link to the district map (usually found on the county GIS); • Date of agency formation; and Links to information about each Independent Special District as available from county departments.
No recommendations for this finding
F3.1
There is no easy access from the county website to the websites of independent special districts, making it difficult for the public to find information about those districts.
No recommendations for this finding
F3.2
County departments have information on independent special districts that is difficult for the public to access.
No recommendations for this finding
F4.1
easily accessible to the public. The brief financial summaries derived from the audits by the Auditor-Controller's Office are
No recommendations for this finding
F4.2
not easily accessible to the public. The Auditor-Controller's Office financial summaries provide a clearer picture of a district's
No recommendations for this finding
F4.3
finances than that which is found on the State Controller's Office site.
No recommendations for this finding
F5.1
quality services that can be shared with independent special districts. The county's robust implementation of its cyber strategy would be difficult for most
No recommendations for this finding
F5.2
independent special districts to duplicate.
No recommendations for this finding
Conclusions 35
-
CL1Create, modify, and delete business systems Business accounts Manage account access Applications 0 Grant role-based access to business systems. Accounts & access for business applications Change account names Ö Access Password reset ŏ Provide employees with Create, modify, and delete user account access . what they need to access (County ID, network, and email) User ID & access Accounts & access County resources located Change account name
-
CL2Password reset Coordinate homeland Security Grant Activity with . FEMA and California Office of Emergency Services Coordinate and conduct meetings for the Local . Homeland Administer the Homeland Approval Authority Administration Security Grant for County Security Grant
-
CL3Facilitate Project Selection process for Homeland Security Funds Participate in Grant Audits Develop IT Standards for IT equipment and
-
CL4Develop and maintain County IT software for the County County IT Purchasing Administration Standards Review and approve any deviations from the
-
CL5Standards defined standards Administer the Office Automation program and . Office Administer the Office budget for the County Administration Automation Automation Program for Process annual orders for IT equipment eligible for ٠ the County Program replacement under the program. Provide ISD staff to Departments for Staff Provide staff ٠ Staff Administration Augmentation based on availability augmentation to Augmentation Departments MS Teams / Webex / Zoom Employees can host or join ۰ Web Conference phones available upon request virtual meetings on their ۰ Collaboration Access to conference meetings (either on- or desktops or laptops either ¢ conferencing remotely or on-site offsite) PC, Desk Phone or Conference Room Phones via ۰ Employees can host or join Audio MS Teams meetings on their Collaboration Access to conference meetings (either on- or telephones either ۰ conferencing offsite) remotely or onsite . Video meetings with multiple parties or one-on- Users can interact via Video webcam with people both one Collaboration within and outside the Video equipment in specific meeting rooms ۰ conferencing organization Inbox . Calendar . Resource scheduling (meeting rooms)
-
CL6Access to shared mailboxes . Unlimit on mailbox size . Common Global Address book/External contacts . Spam filtering, virus protection . Communications Archiving and retrieval of older emails Email Written communication ٠ Web/browser access to email . Mass email/notifications (emergency notification, . surveys, reporting) Setting up a distribution list . Setting up email access on mobile devices . eDiscovery for CPRA / Litigation . Desk phone Teleconference phones (meeting rooms) Voicemail (including recovering deleted voicemails) Team line (a call rings multiple phones) . Team line (a call rings according to a calling tree) Call Center Application Communications VoIP Telephone Voice communication Employee directory . Caller ID . Call history . Call forwarding County provided devices
-
CL7Install applications for business use . County negotiated plan . Upgrades and replacements Manage company-
-
CL8Mobile devices Communications provided mobile devices Assist with active sync . Training, application setup, and maintenance . Mobile Device Management Security (MDM)
-
CL9Install MS Teams . Setup accounts . Instant messaging MS Teams Chat . Enable group messaging Communications between employees Collaboration ė Countywide capability for Public Safety and First
-
CL10Responder communications (Fire/Life/Safety) Local Government (Public Works, Public Health, . Environmental Health) Microwave Connectivity between geographic . P25 Two way radio Radio locations communications and Communications Communications Radio Frequency management with FCC . Microwave connectivity . Maintain Radio Inventory and replacement program Construct and maintain radio tower sites . . Develop and manage MOUs between the County and Federal/State and Municipal agencies Access to external websites ۰ Access online content Certain websites may be blocked/restricted by
-
CL11Internet Connectivity (ethernet or wireless) default Request to unblock sites e Access to services and systems for County ۰ departments in their office space Provide Network Design/Manage data network for office space Ö Local Area connectivity within a Design/Manage wireless connectivity within Connectivity o Network (LAN) County facility County offices o Maintain data cabling infrastructure for County offices ٠ Access to services and systems across geographic locations for County departments Wide Area Provide connectivity Design/Manage data circuits between locations ۰ Connectivity Network (WAN) between facilities Design/Manage wireless connectivity between ۰ County locations ö Provide W-Fi access to County systems and Wi-Fi access for services to employees Wi-Fi Access employees to County Connectivity Provide network security for Wi-Fi network Maintain and support Wi-Fi network ۰ Access to wireless internet for non-employees Non-employees can access ۰ Connectivity Guest Wi-Fi Restricted access the internet onsite ø Business applications . Corporate Develop training based on E-learning courses . Consulting application users' roles training Desktop software training . Desktop Provides training for Desktop hardware training (e.g. headset, multi Consulting general desktop application monitor, equipment and devices, printer setup) applications training Training for IT Staff ۰ IT training Provides training for IT Consulting Staff Development staff consultation Vendor Management . Develop/review and manage IT RFI/RFP process Management of IT
-
CL12Project Track project progress Projects to ensure projects
-
CL13Consulting (timelines/cost/deliverables) delivery desired results Management Provide status reports to executive management within budgeted costs and
-
CL14Office timeframes Assign Project Managers to projects
-
CL15Participate in Project Selection process . Evaluate different proposals and recommend the
-
CL16Technical needs best option Consulting assessment for project RFP reviews Participate in RFI/RFP review and selections proposals process Davelop, maintain and Maintain Information Security Policy for County ۰ Information Update Policy to remain current with regulations recommend d Cybersecurity Information Security and best practices Security Policy Policy Conduct monthly meeting of the Information ò Conduct regular Information Security Committee Cybersecurity Information Security Update membership of Information Security ø Security Meeting Meeting Committee Investigate incidents of information security ۰ Investigate Security Cybersecurity violations within the County. Conduct forensic Incidents Ensure equipment and information is being used investigations of information security Report investigative findings to appropriate ۰ incidents management ٠ Provide information security training to new employees Information Provide Information Provide ongoing annual ongoing information Cybersecurity ۰ Security Training Security Training security training to County staff. Ensure compliance with training requirements ۰ Provide desktop or laptop hardware . Procurement, installation, and configuration of . hardware Upgrading hardware
-
CL17Desktop, Hardware Supply employees with Peripheral devices equipment, & . necessary hardware provisioning software Equipment loaning (e.g. conference room . projectors) Repair hardware . Hardware return and disposal . Supply employees with Request non-standard software
-
CL18Desktop, Software necessary, up-to-date Procure/order new software equipment, &
-
CL19provisioning software ۰ Install and upgrade software software Helping employees . Remote application support Desktop, troubleshoot Onsite application support . Software support equipment, & application errors or Computer remote control software malfunctions Desktop, Sending devices to new locations . Relocate devices from Relocation Services equipment, & Coordinating with those involved with the move one location to another software ۰ Provide software development resources for web Provide software development, mobile applications, custom Software development services applications, interface development, etc. Development Development to County departments Build custom applications, web pages, reports, etc. ۰ for County Departments Provide compute and storage resources Provide private cloud Ensure enough capacity is available on cloud . Cloud Services services to County platform Operations departments Provision storage and server resources as
-
CL20requested by departments Provide Data Backup and Recovery services to . Data Protection Provide data backup County Departments. Operations and recovery services and Recovery Validate data backups are valid and secure . Maintain County's IT Disaster Recovery and
-
CL21Business Continuity Plans Regularly Test and validate plans
-
CL22Disaster Recovery and Disaster Recover / Maintain the County Disaster Recovery Site . Operations Business Continuity Ensure County's mission critical systems are
-
CL23Business Continuity process and technology included in the Disaster Recovery/Business Continuity Plans Review and update plans to remain current ٠ Support and maintain the Board Chamber A/V Maintain the County's Operations system Audio/Visual A/V Systems Maintain the A/V systems in Conference Rooms Phone, email, and remote desktop support Resolve issues and ۰ Help & support User access requests, password resets Service desk provide support for
-
CL24end users Troubleshooting
-
CL25Onsite support for desktop and peripheral In-person support for
-
CL26individual business hardware, desktop software Help & support Desk-side support users regarding end- user technology Emergency support regarding critical business
-
CL27IT support outside of After-hours applications and/or network failure Help & support regular office hours for Manage additional costs associated with after-
-
CL28support critical services hours support Provide support for PeopleSoft Financials and
-
CL29Human Resources Systems Support the County's Oracle Budgeting System Provide software
-
CL30Help & support Support the County's Law & Justice applications support for County Software Support ٠ Provide support for Oracle and Microsoft applications ٠ Databases Support server and desktop software
-
CL31Provide hardware support for County network, Provide hardware
-
CL32server and PC devices. support for Help & Support Hardware Support Provide hardware support for communications network/server/PC
-
CL33devices included Wi-Fi and radios. devices Provide space and resources in the County's
-
CL34Provide Data Center datacenter. Help & Support Data Center Provision server, storage, network, and security resources
-
CL35resources. - 0 \times 100 ---- .
* This report's PDF did not contain easily extractable text and required Optical Character Recognition (OCR) for analysis. There may be minor errors in the extracted findings and recommendations due to OCR limitations with scanned documents.