Seal of the Commonwealth of Massachusetts
Massachusetts Audit Explorer - what the State Auditor found

← all audits

Office of Jury Commissioner

August 19, 2016 · Read the full official report (PDF) ↗

Published August 19, 2016 Audit covers July 1, 2013 – June 30, 2015 Under Suzanne M. Bump · 2011–2023

In plain English
The audit found that the jury office generally had processes for managing juror information, but still had two problems to fix: weak oversight of a software contractor and weak password controls for a key jury system.
source
“Below is a summary of our findings and recommendations, with links to each page listed.”
Read the plain-English breakdown
What is this?

This is a Massachusetts State Auditor performance audit of the Office of Jury Commissioner, covering July 1, 2013 through June 30, 2015.

“This report details the audit objectives, scope, methodology, findings, and recommendations for the audit period, July 1, 2013 through June 30, 2015.”
Why was it audited?

Auditors looked at whether the jury office properly handled accurate juror information and checked whether it fixed problems from an earlier audit.

“The audit was undertaken to determine whether OJC properly administered its process for developing, maintaining, and disseminating accurate juror information.”
Why it matters

The office helps run jury service across Massachusetts, so problems with its software contracts or system security can affect court operations and sensitive data.

“OJC is the judicial-branch agency responsible for the random selection of potential jurors and the management and summoning of all trial and grand jurors in the Commonwealth.”
What's in it for me?

If you may be called for jury duty, this office manages the summons process, juror information, postponements, disqualifications, and online juror services.

“This website allows prospective jurors to confirm or postpone their service, request a hardship transfer or disqualification, complete a demographic survey, update their contact information, and complete and print confidential juror questionnaires.”
The bottom line

The auditor found two remaining issues: the office needed better invoice detail from a software consultant, and it needed stronger password controls for its main jury software.

“OJC had implemented some recommendations from our previous audit, but still needed to enhance its monitoring of the services provided by one of its consultants and did not receive sufficiently detailed invoices for this purpose.”
What happens next

The report recommends that the jury office require clearer contractor invoices and finish strengthening password rules in its jury software.

“OJC should continue to work on establishing enhanced password security controls in this software.”
Why it's significant

The main risk is practical: without better contractor records and password controls, the office may have less assurance that money was spent properly and that sensitive jury data is protected.

“Insufficient control practices for password administration and composition procedures place OJC at increased risk for unauthorized access to sensitive data on its mission-critical applications.”
Jargon, unpacked

OJC means the Office of Jury Commissioner, the state judicial-branch office that manages how jurors are selected, summoned, and tracked.

“The Office of Jury Commissioner (OJC) is authorized by Chapter 234A of the Massachusetts General Laws to manage selection and service of jurors on trial juries and grand juries for the Trial Court.”

What the Auditor checked

What the Auditor found

OJC did not properly monitor its software consulting contract invoices to confirm work matched the contract scope.
procurement/contractsvendor oversightinternal controlsrecordkeeping/documentation

Why it matters: OJC could not be certain that important projects stayed on schedule or that payments were for necessary services related to established project plans.

Standard: Operational Services Division’s 2015 “Procurement Overview” best practice for invoice processing ( Operational Services Division’s 2015 “Procurement Overview” )

1 recommendation
  • OJC should ensure that Verity’s monthly invoices detail the tasks performed so they can be cross-referenced to the contract scope of services.
Agency response & Auditor reply
Agency: "Verity provides the OJC with invoices detailing the resources billed, the rate at which they are billed, and the hours worked during the invoice period."
OJC had not implemented stronger password security controls for its Jury+ NextGen application.
cybersecuritydata privacyinternal controls

Why it matters: Weak password administration increased the risk of unauthorized access to sensitive data in OJC’s mission-critical applications.

Standard: Massachusetts Office of Information Technology’s Enterprise Access Control Policy and OJC’s Password Policy ( Massachusetts Office of Information Technology’s Enterprise Access Control Policy, Section 2; OJC Password Policy, Section 4.1 )

1 recommendation
  • OJC should establish enhanced Jury+ NextGen password controls, including password length, complexity, change frequency, and monitoring requirements.
Agency response & Auditor reply
Agency: "The jury management system vendor, Jury Systems Inc., has recently made available a new version of the Jury+ NextGen software that includes the enhanced password security controls recommended by the SAO."
Auditor: "Based on its response, OJC is taking measures to address our concerns in this area."

Verified dollar findings

Other identified $291,654 not in headline

Identified dollar findings that do not fall in a named band.

$291,654 - payments to contractor during audit period

Prior findings revisited

Still a problem
"The Office of Jury Commissioner is still not properly administering its contract with a software company."
Still a problem
"OJC still needs to implement better access security controls over its database."
Fixed
"OJC has taken measures to address an issue raised in our previous audit related to ensuring that when employees end their employment or change job responsibilities, their access privileges are either terminated or modified as necessary."

More audits of this entity

Other Office of the State Auditor reports on Office of Jury Commissioner , including the prior audits referenced above.

See this entity's page with all 2 audits →