Administrative Services |
| You are here: DOH Home » LHJ Policy and Procedure |
| Site Directory: | |||
Intra Department Electronic Mailing Lists Budgeting Modifications Policy Computing and Information Systems Electronic Data Processing Policy Family and Medical Leave Policy Client and Fee Setting Guidelines Grant and Contract Approval Policy Lactation Friendly Worksite Policy Non Represented Staff Mileage Reimbursement Personnel Policies & Procedures Reimbursement of Travel and Other Expenses Supplies, Inventories and Fixed Assets Policy Taxable Meal Reimbursement Guideline Travel Training Authorization | |||
Subject: Electronic Data Processing Effective: Supersedes: Revised: Author: Approved by: ______________ Policy/Procedure 1. The electronic data processing (EDP) department is to be independent of the accounting and operating departments for which it processes data. 2. An appropriate segregation of duties is to be maintained within the data processing function for system development (design and programming), technical support (maintenance of systems software), and operations, whenever possible. 3. Controls are to be established and followed for the preparation and approval of input transactions outside the EDP department. These controls are to prohibit the EDP department from initiating and processing transactions without the approval of affected users. 4. Controls are to be established over completeness and accuracy of input, processing and output. 5. Controls are to be established for error corrections of rejected transactions. 6. Controls are to be established over entry of data in on-line systems to restrict access to terminals and data entry to authorized employees. Password security should be established on an individual basis. 7. User controls are to include user reconciliation or output totals for all data submitted, internal reconciliation of file balances, and the review of outputs for reasonableness. 8. Controls are to be established over the use and retention of tape and disk files, including provisions for retention of adequate records to provide backup capabilities. 9. Controls are to be exercised over changes to system software. 10. Controls are to be in place which safeguard and limit access to data processing equipment, tapes, disks, files system documentation, and application program documentation to authorized employees. 11. Written documentation of procedures are to be established and followed by computer operators. 12. A written contingency plan is to be in place providing for continued processing of critical applications in the event of a disaster to the computer facility. 13. Controls are to be established for the use and contents of personal computers. | |||
DOH Home | Access Washington | Privacy Notice | Disclaimer/Copyright Information Contact Information for the Department of Health Last Update : 10/07/2004 03:15 PM |