IT Security Audit – Kansas Department for Aging and Disability Services

Under the provisions of K.S.A. 46-1135, the Legislative Division of Post Audit conducts information technology security audits of state agencies and other local governmental entities. Every three years, we conduct a risk assessment which we then use to select auditees for review. The audits compare the selected auditee’s security practices to a number of the IT security standards adopted by the state’s Information Technology Executive Council, as well as a handful of best practices for emerging technology issues. This report is kept permanently confidential under K.S.A. 45-221(a)(12)&(45) because release of the information could jeopardize the auditee’s IT security. No corresponding public report has been issued.