Office of Jury Commissioner
August 19, 2016 · Read the full official report (PDF) ↗
source
“Below is a summary of our findings and recommendations, with links to each page listed.”
Read the plain-English breakdown
This is a Massachusetts State Auditor performance audit of the Office of Jury Commissioner, covering July 1, 2013 through June 30, 2015.
“This report details the audit objectives, scope, methodology, findings, and recommendations for the audit period, July 1, 2013 through June 30, 2015.”
Auditors looked at whether the jury office properly handled accurate juror information and checked whether it fixed problems from an earlier audit.
“The audit was undertaken to determine whether OJC properly administered its process for developing, maintaining, and disseminating accurate juror information.”
The office helps run jury service across Massachusetts, so problems with its software contracts or system security can affect court operations and sensitive data.
“OJC is the judicial-branch agency responsible for the random selection of potential jurors and the management and summoning of all trial and grand jurors in the Commonwealth.”
If you may be called for jury duty, this office manages the summons process, juror information, postponements, disqualifications, and online juror services.
“This website allows prospective jurors to confirm or postpone their service, request a hardship transfer or disqualification, complete a demographic survey, update their contact information, and complete and print confidential juror questionnaires.”
The auditor found two remaining issues: the office needed better invoice detail from a software consultant, and it needed stronger password controls for its main jury software.
“OJC had implemented some recommendations from our previous audit, but still needed to enhance its monitoring of the services provided by one of its consultants and did not receive sufficiently detailed invoices for this purpose.”
The report recommends that the jury office require clearer contractor invoices and finish strengthening password rules in its jury software.
“OJC should continue to work on establishing enhanced password security controls in this software.”
The main risk is practical: without better contractor records and password controls, the office may have less assurance that money was spent properly and that sensitive jury data is protected.
“Insufficient control practices for password administration and composition procedures place OJC at increased risk for unauthorized access to sensitive data on its mission-critical applications.”
OJC means the Office of Jury Commissioner, the state judicial-branch office that manages how jurors are selected, summoned, and tracked.
“The Office of Jury Commissioner (OJC) is authorized by Chapter 234A of the Massachusetts General Laws to manage selection and service of jurors on trial juries and grand juries for the Trial Court.”
What the Auditor checked
- Complied Does OJC have a process to provide the trial courts with a sufficient number of prospective jurors to conduct court business as required by Section 13 of Chapter 234A of the General Laws? Does OJC have a process for using this information to adjust the number of jurors summoned by each judicial district each year?
- Complied Does OJC have a process for reviewing the annual census lists supplied by cities and towns to the Secretary of the Commonwealth in order to maintain a master juror list in accordance with Section 16 of Chapter 234A of the General Laws?
- Partially Did OJC implement corrective actions related to the findings of our previous audit (No. 2012-1216-4T) regarding system access controls over the Jury+ NextGen application and controls over various areas?
What the Auditor found
Why it matters: OJC could not be certain that important projects stayed on schedule or that payments were for necessary services related to established project plans.
Standard: Operational Services Division’s 2015 “Procurement Overview” best practice for invoice processing ( Operational Services Division’s 2015 “Procurement Overview” )
1 recommendation
- OJC should ensure that Verity’s monthly invoices detail the tasks performed so they can be cross-referenced to the contract scope of services.
Agency response & Auditor reply
Agency: "Verity provides the OJC with invoices detailing the resources billed, the rate at which they are billed, and the hours worked during the invoice period."
Why it matters: Weak password administration increased the risk of unauthorized access to sensitive data in OJC’s mission-critical applications.
Standard: Massachusetts Office of Information Technology’s Enterprise Access Control Policy and OJC’s Password Policy ( Massachusetts Office of Information Technology’s Enterprise Access Control Policy, Section 2; OJC Password Policy, Section 4.1 )
1 recommendation
- OJC should establish enhanced Jury+ NextGen password controls, including password length, complexity, change frequency, and monitoring requirements.
Agency response & Auditor reply
Agency: "The jury management system vendor, Jury Systems Inc., has recently made available a new version of the Jury+ NextGen software that includes the enhanced password security controls recommended by the SAO."
Auditor: "Based on its response, OJC is taking measures to address our concerns in this area."
Verified dollar findings
Identified dollar findings that do not fall in a named band.
Prior findings revisited
"The Office of Jury Commissioner is still not properly administering its contract with a software company."
"OJC still needs to implement better access security controls over its database."
"OJC has taken measures to address an issue raised in our previous audit related to ensuring that when employees end their employment or change job responsibilities, their access privileges are either terminated or modified as necessary."
More audits of this entity
Other Office of the State Auditor reports on Office of Jury Commissioner , including the prior audits referenced above.
- Audit of the Office of Jury Commissioner (September 20, 2024)Authority / Commission · September 20, 2024