New

Published: February, 2026

KDHE Early Childhood Data Integration and System Enhancement IT Project (monitoring period October 15, 2025 through January 31, 2026)

Read Report Read Abstract

KDHE Early Childhood Data Integration and System Enhancement IT Project (monitoring period October 15, 2025 through January 31, 2026)

Report Abstract

N/A

Read Full Report

New

Published: February, 2026

2-Year Summary of Security Controls in Selected State and Local Entities (2024-2025)

Read Report Read Abstract

2-Year Summary of Security Controls in Selected State and Local Entities (2024-2025)

Report Abstract

We completed 15 audits on 13 state agencies, 1 school district, and 1 city between CY 2024 and CY 2025. This summary report shows 7 of the 15 entities did not substantially comply with applicable IT security standards and best practices. Entities struggled with properly scanning and patching their computers. Entities also had compliance problems because they did not create, maintain, or test continuity of operations and disaster recovery plans, as well as incident response plans. Other significant issues included poor security awareness training or failed social engineering tests. More than half the entities had significant management process weaknesses, including inadequate asset inventories, contract issues, or lacking a designated information security officer. Additional security weaknesses included inadequate network, boundary, and data protection processes. We also noted some entities did not adequately protect their electronic backup data. Some entities had poor access or environmental controls for their data centers, and a few entities had inadequate account security control. Lastly, we identified significant security issues within entities' specific IT systems. The findings in this report are similar to those in previous summary IT reports. The main reasons for compliance problems across the 15 entities included insufficient top management attention, inadequate resources, and poor contractor administration.

Read Full Report

New

Published: February, 2026

IT Security Audit – Board of Veterinary Examiners

View Audit Statement

IT Security Audit – Board of Veterinary Examiners

Audit Statement

Under the provisions of K.S.A. 46-1135, the Legislative Division of Post Audit conducts information technology security audits of state agencies. Every three years, we conduct a risk assessment which we then use to select agencies for review. The audits compare the selected agency’s security practices to a number of the IT security standards adopted by the state’s Information Technology Executive Council, as well as a handful of best practices for emerging technology issues. This report is kept permanently confidential under K.S.A. 45-221(a)(12)&(45) because release of the information could jeopardize the agency’s IT security. No corresponding public report has been issued.

View 3-year IT Summary Report

New

Published: January, 2026

Reviewing Tax-Exempt Real Property and Property Donated to Universities

Read Report Read Abstract

Reviewing Tax-Exempt Real Property and Property Donated to Universities

Report Abstract

Real property taxes are taxes paid on land, minerals, and buildings. They're used to fund state and local governments. Most of the real property taxes collected fund local governments (99%) while the remainder fund state government (1%). However, state law exempts some real property, such as government owned property and property owned by non-profits from real property taxes. This means these properties aren't taxed and governments don't receive tax revenue for these properties. We estimated that in 2024 local governments didn't collect about $1 billion in revenue from exempt real properties. We also estimated that in 2024 the state didn't collect about $12 million in revenue from exempt properties. As part of this audit, we also were asked to estimate how much exempt real property was donated to the state's public universities and their foundations. Public universities in Kansas and their foundations owned about $4.4 billion in appraised value of exempt real property in 2024 that they used for things like classrooms, sports, student housing, and research. This was about 98% of the total appraised value of all real property they owned. However, we don't know how much of that real property was donated because most universities don't maintain that information.

Read Full Report

New

Published: January, 2026

Reviewing Supplemental Nutrition Assistance Program Payment Error Rates and Benefit Card Transactions, Part 1

Read Report Read Abstract

Reviewing Supplemental Nutrition Assistance Program Payment Error Rates and Benefit Card Transactions, Part 1

Report Abstract

DCF’s payment error rate exceeded federal standards in fiscal years 2023 and 2024 for multiple reasons including high staff turnover, the complexity of the SNAP eligibility rules, and inconsistent verification efforts. The Supplemental Nutrition Assistance Program (SNAP) is a federal program that provides monthly funds to low-income families to buy food. Individuals must submit an application and provide extensive financial and other information to the Department for Children and Families (DCF) to qualify for SNAP benefits. DCF takes several steps to process and verify each application. The SNAP benefit eligibility determination is complex, and errors can occur at many points. The federal government monitors states’ SNAP benefit payments to ensure accuracy. DCF’s SNAP payment error rate has exceeded the federal payment error rate threshold of 6% since 2019. In the 2 years we reviewed, most of the nearly 300 errors that contributed to the payment error rate were related to miscalculating an applicant’s income and resources. Staff turnover, the complexity of SNAP eligibility rules, and inconsistent verification efforts appear to be significant factors in the department’s SNAP payment errors. DCF told us modifications to KEES might reduce SNAP payment errors but it’s unclear how much impact additional actions might have. Across the 2 years we reviewed, we identified several hundred additional errors that were not included in the federal payment error rate because the dollar value of the error was less than the federal reporting threshold. Last, changes in federal law could result in the state paying for a larger share of SNAP costs.

Read Full Report

New

Published: January, 2026

IT Security Audit – Kansas Real Estate Commission

View Audit Statement

IT Security Audit – Kansas Real Estate Commission

Audit Statement

Under the provisions of K.S.A. 46-1135, the Legislative Division of Post Audit conducts information technology security audits of state agencies. Every three years, we conduct a risk assessment which we then use to select agencies for review. The audits compare the selected agency’s security practices to a number of the IT security standards adopted by the state’s Information Technology Executive Council, as well as a handful of best practices for emerging technology issues. This report is kept permanently confidential under K.S.A. 45-221(a)(12)&(45) because release of the information could jeopardize the agency’s IT security. No corresponding public report has been issued.

View 3-year IT Summary Report

New

Published: January, 2026

IT Security Audit – Commission on Peace Officers’ Standards and Training

View Audit Statement

IT Security Audit – Commission on Peace Officers’ Standards and Training

Audit Statement

Under the provisions of K.S.A. 46-1135, the Legislative Division of Post Audit conducts information technology security audits of state agencies. Every three years, we conduct a risk assessment which we then use to select agencies for review. The audits compare the selected agency’s security practices to a number of the IT security standards adopted by the state’s Information Technology Executive Council, as well as a handful of best practices for emerging technology issues. This report is kept permanently confidential under K.S.A. 45-221(a)(12)&(45) because release of the information could jeopardize the agency’s IT security. No corresponding public report has been issued.

View 3-year IT Summary Report

Published: November, 2025

KDHE Early Childhood Data Integration and System Enhancement IT Project (monitoring period July 1, 2025 through October 15, 2025)

Read Report Read Abstract

KDHE Early Childhood Data Integration and System Enhancement IT Project (monitoring period July 1, 2025 through October 15, 2025)

Report Abstract

N/A

Read Full Report

Published: November, 2025

Reviewing Counties’ Costs and Obligations to Meet State Requirements

Read Report Read Abstract

Reviewing Counties’ Costs and Obligations to Meet State Requirements

Report Abstract

We estimate the 3 counties we reviewed spent $28.8 million providing a selection of 3 services in fiscal year 2024, which was partially offset by $9.7 million in state, federal, and user fee funding. State law requires counties to provide a variety of core services, such as election administration, law enforcement, and motor vehicle registration. Counties are primarily funded by local tax revenue, and they generally use this revenue to cover the costs of providing the services state law requires. We selected 3 core services and 3 counties to review. The services included criminal prosecution, motor vehicle registration, and ad valorem tax collection. The counties included Gove, Johnson, and Labette counties. We worked closely with county officials to determine how much the 3 counties spent to provide the 3 core services during fiscal year 2024. In total, we estimate the 3 counties we reviewed spent $17.3 million on criminal prosecution in fiscal year 2024, which was slightly offset with $846,000 in grants and user fees. In total, we estimate the 3 counties we reviewed spent $8.3 million providing motor vehicle registration services in 2024, which was partially offset by $5.0 million in user fees. In total, we estimate the 3 counties spent $3.2 million collecting ad valorem taxes in fiscal year 2024, which was fully offset by $3.9 million in user fees and fines. The 3 counties’ costs for the 3 services we reviewed were generally related to meeting requirements in state law. We estimate it would cost the state $19.1 million to cover the 3 counties’ fiscal year 2024 costs for the services we reviewed, but this likely isn’t consistent each year. Officials from the 3 counties we reviewed told us state process improvements would be more helpful than additional state funding. Other estimates for counties’ motor vehicle registration service costs used reasonable methods but differed from ours because we had more detailed and updated data.

Read Full Report

Published: November, 2025

Reviewing Available Options for Acquiring State Office Space

Read Report Read Abstract

Reviewing Available Options for Acquiring State Office Space

Report Abstract

State agencies purchase or lease space to meet a variety of needs ranging from office work to storage to public services. State agencies have discretion in determining what office space they need and how to acquire it. The information in this report is self-reported by agencies because the state doesn’t have a central repository for all agency-owned office space. In fiscal year 2025, state agencies reported owning or leasing 4.1 million square feet of office space across the state. Additionally, in fiscal year 2025, state agencies leased around 63% of their office space and owned about 32% of their office space statewide. They had other arrangements for about 5% of their office space. As far as usage, agencies reported most office space was occupied. Most agencies also reported they had enough space if all employees were asked to work in the office. Most lease agreements in privately owned buildings are less than 10 years in length and can’t be broken unless state funding is terminated. Leasing appears to be the most common option for state agencies to acquire office space in Topeka. In fiscal year 2025, state agencies in Topeka reported leasing costs for privately owned buildings were less than state-owned buildings. The annual cost to own space in Topeka is unclear because few agencies own space and DOA data on state-owned office buildings wasn’t reliable. Agencies’ decisions to lease or purchase office space are based on several factors, some of which are non-financial. About a quarter of the space in the newly renovated Docking State Office Building is office space, and most of that space will be filled with 4 agencies.

Read Full Report

Published: November, 2025

Follow Up Audit: Reviewing Agencies’ Implementation of Selected Performance Audit Recommendations

Read Report Read Abstract

Follow Up Audit: Reviewing Agencies’ Implementation of Selected Performance Audit Recommendations

Report Abstract

This audit evaluated whether entities implemented 9 previous audit recommendations. We determined that 4 of the 9 recommendations have been implemented. The 5 Groundwater Managmeent Districts implemented 1 recommendation from our 2023 audit. of them? The Departments of Revenue and Commerce implemented the recommendation from our 2023 audit of the Rural Opportunity Zones Program. The Secretary of State's Office implemented 1 recommendation, partially implemented 1 recommendation, and didn't implement the third recommendation from our 2023 audit of election security (part 2). The Department of Revenue implemented 1 recommendation and partially implemented 3 recommendations from our 2024 audit of motor vehicle sales taxes.

Read Full Report

Published: September, 2025

KDHE Early Childhood Data Integration and System Enhancement IT Project Update (April 1, 2025 – June 30, 2025)

Read Report Read Abstract

KDHE Early Childhood Data Integration and System Enhancement IT Project Update (April 1, 2025 – June 30, 2025)

Report Abstract

N/A

Read Full Report

Published: September, 2025

IT Security Audit – Board of Nursing

View Audit Statement

IT Security Audit – Board of Nursing

Audit Statement

Under the provisions of K.S.A. 46-1135, the Legislative Division of Post Audit conducts information technology security audits of state agencies. Every three years, we conduct a risk assessment which we then use to select agencies for review. The audits compare the selected agency’s security practices to a number of the IT security standards adopted by the state’s Information Technology Executive Council, as well as a handful of best practices for emerging technology issues. This report is kept permanently confidential under K.S.A. 45-221(a)(12)&(45) because release of the information could jeopardize the agency’s IT security. No corresponding public report has been issued.

View 3-year IT Summary Report

Published: September, 2025

Reviewing Tax Credits Awarded and Used through the High Performance Incentive Program and the Kansas Affordable Housing Tax Credit (Limited-Scope)

Read Report Read Abstract

Reviewing Tax Credits Awarded and Used through the High Performance Incentive Program and the Kansas Affordable Housing Tax Credit (Limited-Scope)

Report Abstract

The High Performance Incentive Program (HPIP) allows qualifying businesses to earn state income tax credits based on their expenditures on employee training and education and on qualifying capital investments. We couldn't report how much HPIP credit businesses earned and used in recent years because of reliability issues with KDOR's HPIP data. We identified inconsistencies in the data that KDOR officials told us they were trying to resolve. The Kansas Affordable Housing Tax Credit (KAHTC) is a state income tax credit that matches the federal low-income housing tax credit. Both credits help subsidize the creation of affordable rental housing. The Kansas Housing Resources Corporation (KHRC) administers both credits. Since 2023, when the KAHTC was first allowed, KHRC has awarded rental housing development projects about $73 million in KAHTC credits. It may award an additional $34 million in tax credits by the time the KAHTC ends in 2028. At the time of our audit, no taxpayers had used the KAHTC to reduce their income tax liabilities. However, they will likely begin doing so soon. Over the next approximately 15 years, taxpayers' use of KAHTC credit awards may result in the state forgoing about $1 billion in income tax revenues.

Read Full Report

Published: September, 2025

Evaluating Access Controls of School District Accounting Systems

Read Report Read Abstract

Evaluating Access Controls of School District Accounting Systems

Report Abstract

Of the 20 districts we reviewed, only some had adequate access controls for their accounting systems, and very few had adequate written policies. School districts use accounting systems to manage their expenses and report on their financial information. It’s critical that school districts protect their accounting systems against unauthorized access. School districts are not required to follow the state’s IT security policies. We compiled a set of IT security and accounting best practices to evaluate school districts’ access controls for accounting systems. We reviewed accounting system access control policies and practices for 20 judgmentally selected school districts across Kansas. None of the 20 districts we reviewed had adequate IT security access control practices in all 3 categories we evaluated. Almost all school districts we reviewed (19 of 20) lacked all expected account management control practices within their accounting systems. Most school districts we reviewed (16 of 20) also did not have all expected identity management practices in place within their accounting systems. About half of the school districts we reviewed (11 of 20) had all expected controls in place to limit user access to their accounting systems, and most school districts had at least 4 of the 5 controls we reviewed. Finally, very few of the 20 districts we reviewed had adequate written policies related to any access controls for their accounting systems. Smaller school districts tended to lack more access controls for their accounting systems, but all districts could benefit from formalized policies. KSDE told us that districts have been moving to computerized systems quickly, and it was not surprising that districts have very few policies.

Read Full Report

Published: July, 2025

IT Security – Follow Up Audit

View Audit Statement

IT Security – Follow Up Audit

Audit Statement

Under the provisions of K.S.A. 46-1135, the Legislative Division of Post Audit conducts information technology security audits of state agencies. Every three years, we conduct a risk assessment which we then use to select agencies for review. The audits compare the selected agency’s security practices to a number of the IT security standards adopted by the state’s Information Technology Executive Council, as well as a handful of best practices for emerging technology issues. This report is kept permanently confidential under K.S.A. 45-221(a)(12)&(45) because release of the information could jeopardize the agency’s IT security. No corresponding public report has been issued.

View 3-year IT Summary Report

Published: July, 2025

IT Security Audit – City of Topeka

View Audit Statement

IT Security Audit – City of Topeka

Audit Statement

Under the provisions of K.S.A. 46-1135, the Legislative Division of Post Audit conducts information technology security audits of state agencies. Every three years, we conduct a risk assessment which we then use to select agencies for review. The audits compare the selected agency’s security practices to a number of the IT security standards adopted by the state’s Information Technology Executive Council, as well as a handful of best practices for emerging technology issues. This report is kept permanently confidential under K.S.A. 45-221(a)(12)&(45) because release of the information could jeopardize the agency’s IT security. No corresponding public report has been issued.

View 3-year IT Summary Report

Published: July, 2025

Follow Up Audit: Reviewing Agencies’ Implementation of Selected Performance Audit Recommendations

Read Report Read Abstract

Follow Up Audit: Reviewing Agencies’ Implementation of Selected Performance Audit Recommendations

Report Abstract

This audit evaluated whether agencies implemented 6 previous audit recommendations. We determined that 3 of the 6 recommendations have been implemented. The Kansas Department for Children and Families (DCF) and Department for Aging and Disability Services (KDADS) implemented 2 recommendations and partially implemented 2 other recommendations from our 2022 audit of foster care services. The Kansas State Department of Education (KSDE) implemented the recommendation from our 2022 limited-scope audit of social workers employed by school districts. Finally, KSDE partially implemented the recommendation from our 2022 limited-scope audit of scholarship granting organizations' compliance with distribution requirements for the Tax Credit for Low Income Students Scholarship Program.

Read Full Report

Published: July, 2025

Reviewing Outcomes of the Office of the Inspector General’s Investigations (Limited-Scope)

Read Report Read Abstract

Reviewing Outcomes of the Office of the Inspector General’s Investigations (Limited-Scope)

Report Abstract

This limited-scope audit evaluated the outcomes of the Kansas Office of the Inspector General’s (OIG) investigations and audits from calendar years 2021 through 2024, with a focus on financial recoveries and prosecutorial results. The OIG is an independent entity within the Kansas Attorney General’s Office and is tasked with increasing accountability and oversight of Kansas medical (and other) assistance programs through audits, reviews, and investigations. To assess the impact of OIG’s work, we examined summary data on 280 investigations initiated during the review period, consulted relevant district court records, and conducted follow-up interviews with OIG officials. Our analysis found that 2 of the 280 investigations have led to prosecutions, which have resulted in the recovery of less than $1,000 to date. Additional legal actions may be possible given the number of still open investigations. We also reviewed all 9 audits and reviews OIG published between 2021 and 2024. Of these, we confirmed the recovery of $1.3 million documented in 1 report.

Read Full Report

Audit Report Library

Filter Results

KDHE Early Childhood Data Integration and System Enhancement IT Project (monitoring period October 15, 2025 through January 31, 2026)

KDHE Early Childhood Data Integration and System Enhancement IT Project (monitoring period October 15, 2025 through January 31, 2026)

Report Abstract

2-Year Summary of Security Controls in Selected State and Local Entities (2024-2025)

2-Year Summary of Security Controls in Selected State and Local Entities (2024-2025)

Report Abstract

IT Security Audit – Board of Veterinary Examiners

IT Security Audit – Board of Veterinary Examiners

Audit Statement

Reviewing Tax-Exempt Real Property and Property Donated to Universities

Reviewing Tax-Exempt Real Property and Property Donated to Universities

Report Abstract

Reviewing Supplemental Nutrition Assistance Program Payment Error Rates and Benefit Card Transactions, Part 1

Reviewing Supplemental Nutrition Assistance Program Payment Error Rates and Benefit Card Transactions, Part 1

Report Abstract

IT Security Audit – Kansas Real Estate Commission

IT Security Audit – Kansas Real Estate Commission

Audit Statement

IT Security Audit – Commission on Peace Officers’ Standards and Training

IT Security Audit – Commission on Peace Officers’ Standards and Training

Audit Statement

KDHE Early Childhood Data Integration and System Enhancement IT Project (monitoring period July 1, 2025 through October 15, 2025)

KDHE Early Childhood Data Integration and System Enhancement IT Project (monitoring period July 1, 2025 through October 15, 2025)

Report Abstract

Reviewing Counties’ Costs and Obligations to Meet State Requirements

Reviewing Counties’ Costs and Obligations to Meet State Requirements

Report Abstract

Reviewing Available Options for Acquiring State Office Space

Reviewing Available Options for Acquiring State Office Space

Report Abstract

Follow Up Audit: Reviewing Agencies’ Implementation of Selected Performance Audit Recommendations

Follow Up Audit: Reviewing Agencies’ Implementation of Selected Performance Audit Recommendations

Report Abstract

KDHE Early Childhood Data Integration and System Enhancement IT Project Update (April 1, 2025 – June 30, 2025)

KDHE Early Childhood Data Integration and System Enhancement IT Project Update (April 1, 2025 – June 30, 2025)

Report Abstract

IT Security Audit – Board of Nursing

IT Security Audit – Board of Nursing

Audit Statement

Reviewing Tax Credits Awarded and Used through the High Performance Incentive Program and the Kansas Affordable Housing Tax Credit (Limited-Scope)

Reviewing Tax Credits Awarded and Used through the High Performance Incentive Program and the Kansas Affordable Housing Tax Credit (Limited-Scope)

Report Abstract

Evaluating Access Controls of School District Accounting Systems

Evaluating Access Controls of School District Accounting Systems

Report Abstract

IT Security – Follow Up Audit

IT Security – Follow Up Audit

Audit Statement

IT Security Audit – City of Topeka

IT Security Audit – City of Topeka

Audit Statement

Follow Up Audit: Reviewing Agencies’ Implementation of Selected Performance Audit Recommendations

Follow Up Audit: Reviewing Agencies’ Implementation of Selected Performance Audit Recommendations

Report Abstract

Reviewing Outcomes of the Office of the Inspector General’s Investigations (Limited-Scope)

Reviewing Outcomes of the Office of the Inspector General’s Investigations (Limited-Scope)

Report Abstract