Seal of the Commonwealth of Massachusetts
Massachusetts Audit Explorer - what the State Auditor found

← all audits

Audit of the Hampden County Sheriff’s Office (HCSO)

May 14, 2020 · Hampden County Sheriff’s Office · Read the full official report on mass.gov ↗

Published May 14, 2020 Audit covers July 1, 2017 – June 30, 2019 Under Suzanne M. Bump · 2011–2023

In plain English
The auditor checked several Hampden County Sheriff’s Office spending and overtime controls and found no reportable problems, but noted the office should add IT security awareness training.
source
“There were no findings that reached the level of reportability.”
Read the plain-English breakdown
What is this?

This is a state performance audit of the Hampden County Sheriff’s Office covering July 1, 2017 through June 30, 2019.

“This report details the audit objectives, scope, methodology, and recommendations for the audit period, July 1, 2017 through June 30, 2019.”
Why was it audited?

The auditor reviewed whether the office’s non-payroll spending, contracting process, and overtime oversight were appropriate.

“In this performance audit, we examined HCSO’s activities related to the appropriateness of its non-payroll expenses, its process for contracting for goods and services, and its oversight of staff overtime.”
Why it matters

The sheriff’s office runs correctional facilities, supervises staff and inmates, and spends tens of millions of state dollars, so its controls affect public money and public safety.

“For its operational needs for fiscal years 2018 and 2019, HCSO received state appropriations of $80,121,240 and $81,553,076, respectively.”
What's in it for me?

For residents, the main takeaway is that the audit did not find significant problems in the areas tested, including expenses, contracts, and overtime pay.

“Our audit revealed no significant instances of noncompliance in any of the areas we audited that must be reported under generally accepted government auditing standards.”
The bottom line

The office passed the audit objectives: expenses were supported, contracting followed policy, and the reviewed overtime was for hours worked.

“Below is a list of our audit objectives, indicating each question we intended our audit to answer and the conclusion we reached regarding each objective.”
What happens next

The auditor recommended that the sheriff’s office start IT security awareness training for employees when they are hired and repeat it periodically.

“We believe that HCSO should implement some form of IT security awareness training related to data security for employees upon hire and periodically thereafter.”
Why it's significant

Even though there were no reportable audit findings, the report flags cybersecurity training as important because the office handles sensitive information.

“HCSO handles sensitive information, and this training could provide a level of security to reduce the risk of its information systems being compromised.”
Jargon, unpacked

“Non-payroll expenses” means spending other than employee pay, such as invoices and purchase orders for goods and services.

“We reviewed supporting documentation, such as invoices and purchase orders, and analyzed it to determine whether the expenditures were supported and directly applicable to HCSO’s mission.”

What the Auditor checked

What the Auditor found

The Hampden County Sheriff’s Office did not conduct information technology security awareness training for staff.
cybersecurityinternal controlsdata privacy

Why it matters: This increases the risk that sensitive information could be released or that information systems could be compromised.

Standard: Best business practices and Commonwealth Executive Office of Technology Services and Security requirements for executive departments call for IT security awareness training.

1 recommendation
  • HCSO should implement some form of IT security awareness training related to data security for employees upon hire and periodically thereafter.

More audits of this entity

Other Office of the State Auditor reports on Hampden County Sheriff’s Office .

See this entity's page with all 2 audits →