Performance Audit Reports

Management of Police Information Resources

November 5, 2015

2015-11-10

National Audit Office: the prompt response to requests from citizens should be ensured

Picture for National Audit Office: the prompt response to requests from citizens should be ensured

Data that are necessary for the implementation of Police objectives are managed in departmental registers, information systems, automated data processing systems and networks. During an audit carried out by the National Audit Office, information resource management in the Police Department was evaluated for the first time. The essential findings of auditors are: a weak internal control of information technology (IT) which affects safety information systems (SIS), a lack of IT strategic planning which could ensure that funds are allocated to the most important operational needs, and developed functionalities that can speed up the granting of aid would be effectively used.

Functions of other institutions depend on the actions of the Police Department and its SIS management. For instance, when data-processing of Police registers was disrupted, a state enterprise "Regitra" was unable to issue driving licenses. The Police Department was not prepared to restore the controlled SIS within the prescribed period and reduce the negative impact on its and other institutions activities.

It was also found that in order to respond promptly to a request for help and shorten the time of response in the case of legal violations, the Police Department improved SIS by enabling police officers to receive an occurrence reporting in their workplace (i.e. a car), see its brief description, to capture the arrival in accident locations, to record work completion and rest periods, and status of police force units. However, the function which was created more than a year ago is still not used.

A Web service, developed for the exchange of information between the Emergency Response Centre (ERC) and the units of Police operational management, was not put into service for more than twelve months because the Fire and Rescue Department failed to make improvements in SIS of the ERC. It should be noted that the Ministry of Interior insufficiently coordinated activities of subordinate institutions and failed to take appropriate steps to ensure reliable exchange of data between the Department and the ERC. When these shortcomings are removed, the response time of the ERC will be shortened while providing prompt help.

It is important to note that the risks of illegal databases in the Police Department are managed, and a part of identified shortcomings were rectified during the audit. The National Audit Office made recommendations in order to eliminate other identified shortcomings. When shortcomings are removed the IT management control will be strengthened. Then the Police Department will be able to independently ensure information resource management maturity, and such experience will be useful for other public authorities.