|
Administrative Services |
| You are here: DOH Home » LHJ Policy and Procedure |
| Site Directory: | |||
|
Intra Department Electronic Mailing Lists Budgeting Modifications Policy Computing and Information Systems Electronic Data Processing Policy Family and Medical Leave Policy Client and Fee Setting Guidelines Grant and Contract Approval Policy Lactation Friendly Worksite Policy Non Represented Staff Mileage Reimbursement Personnel Policies & Procedures Reimbursement of Travel and Other Expenses Supplies, Inventories and Fixed Assets Policy Taxable Meal Reimbursement Guideline Travel Training Authorization
|
|||
|
Subject: Electronic
Data Processing Effective:
Supersedes: Revised: Author:
Approved by: ______________ Policy/Procedure 1.
The electronic data processing (EDP) department is to be independent
of the accounting and operating departments for which it processes data. 2.
An appropriate segregation of duties is to be maintained within the
data processing function for system development (design and programming),
technical support (maintenance of systems software), and operations,
whenever possible. 3.
Controls are to be established and followed for the preparation and
approval of input transactions outside the EDP department.
These controls are to prohibit the EDP department from initiating and
processing transactions without the approval of affected users. 4.
Controls are to be established over completeness and accuracy of
input, processing and output. 5.
Controls are to be established for error corrections of rejected
transactions. 6.
Controls are to be established over entry of data in on-line systems
to restrict access to terminals and data entry to authorized employees. Password security should be established on an individual
basis. 7.
User controls are to include user reconciliation or output totals for
all data submitted, internal reconciliation of file balances, and the review
of outputs for reasonableness. 8.
Controls are to be established over the use and retention of tape and
disk files, including provisions for retention of adequate records to
provide backup capabilities. 9.
Controls are to be exercised over changes to system software. 10.
Controls are to be in place which safeguard and limit access to data
processing equipment, tapes, disks, files system documentation, and
application program documentation to authorized employees. 11.
Written documentation of procedures are to be established and
followed by computer operators. 12.
A written contingency plan is to be in place providing for continued
processing of critical applications in the event of a disaster to the
computer facility. |
|||
|
DOH Home | Access Washington | Privacy Notice | Disclaimer/Copyright Information Contact Information for the Department of Health Last
Update :
10/07/2004 03:15 PM
|