Office of the Superintendent


Legislative Audit Report on the Security of Montana’s Student Information System

Tuesday, March 2, 2010, 1:53 pm

The Montana Legislative Audit Division has completed its information systems audit of OPI’s statewide student information system, AIM – Achievement in Montana.  The purpose of the audit was to 1) Verify controls are in place to ensure the availability of real time data in AIM;  2) Ensure controls are in place to prevent unauthorized access to student data in AIM;  3) Verify processing controls are in place to ensure AIM data completeness; and 4) Ensure AIM is generating accurate reports.  Click here to review the audit report Achievement in Montana: Security of Student Information for the Office of Public Instruction.

 

The audit gave high marks for the security of the AIM system and recommended areas for improving the management of user accounts in AIM.  The auditors recommended that OPI establish procedures to require unique accounts for all district users and to ensure that district account user information is up-to-date and all users comply with applicable policies.  The auditors also recommended that OPI ensure district users receive appropriate training regarding security of student data and use of the system.  OPI has produced three web-based presentations regarding the security of student data.  These presentations are each about 15 minutes in length and can be found on the OPI web page at http://www.opi.mt.gov/Reports&Data/AIM/Index.html#p7GPc1_11 .  OPI encourages school personnel who are working with confidential student data to view the presentation on School District Responsibilities and Features of AIM.

For more information, contact Madalyn Quinlan, Chief of Staff, 406-444-3168