Citizens Information Systems Advisory Committee Meeting Report: May 29
Jun 1, 2009
On Friday, May 29, 2009, Citizens Property Insurance Corporation’s (“Citizens”) Information Systems Advisory Committee (“Committee”) met to review key 2009 projects and audit activity. To view the meeting agenda, click here.
Chairman Willam Corry called the meeting to order with Committee members Allan Katz, Jim Harty, Nancy Sampson and David Paradice in attendance. Also in attendance were Citizens’ Senior Vice President of Systems Curt Overpeck, Vice President of Technology Robert Sellers and Staff Member Kelly Booten.
Audit Activity
Since the Committee’s most recent meeting, the following audits have been completed:
- Operational audit by the State of Florida’s Auditor General
- Target market conduct examination by the Florida Office of Insurance Regulation (“OIR”)
- Year-end 2008 financial statement audit by Carr, Riggs and Ingram
The following issues have been identified by the Auditor General and the OIR, but were not rated as unsatisfactory or critical control deficiencies: lack of a formal information technology (“IT”) security awareness program; lack of security controls that would ensure users have only the access needed to perform their duties; and inclusion of two systems in Citizens’ newly-implemented disaster recovery plan.
To view an update on audits that have been completed since January 30, 2009, click here.
Security Audit Response Program
The Security Audit Response Program focuses on awareness, account management and risk management, and was developed to provide structure and support for multiple projects initiated as a result of the recent audits that affected Citizens’ IT department.
To view updates on the Security Audit Response Program, click here.
Technology/Infrastructure Project Updates
Updates were given on the following technology/infrastructure projects:
Data Center-A comprehensive study of Citizens’ existing data center capabilities versus Citizens’ expected future needs is being conducted in order to formulate a long-term data center plan. This project is on schedule and is expected to be completed during the third quarter of 2009.
Disaster Recovery-A test was performed in mid-May 2009 on Citizens’ disaster recovery plan. Although execution of the test was successful, one of the test’s goals was not completed due to testing methodology. The issue is being rectified and the revised plan will be re-tested in late second or early third quarter 2009.
Business Continuity-The business continuity program is designed to ensure that Citizens has a “tried and tested” set of procedures in place to address unplanned business service interruptions. A mock test will be conducted for the basic corporate core services (such as facilities, human resources and IT) in the late second quarter of 2009.
Telecommunications Network-The telecommunications network project addresses the following five objectives: development of a unified approach to Citizens’ telecommunications needs; identification of potential new services; provision of support for a high-claim catastrophe; provision of support for potential data growth; and support of the data center’s strategic initiatives while consolidating IT systems and services to a single production center. The Telecommunications Project is on schedule and will be completed in the fourth quarter of 2009.
To view updates of technology/infrastructure projects, click here.
Application Development Project Updates
Updates were given on the following application development projects:
2009 Catastrophe Preparation-Citizens’ IT Department is working to support the Catastrophe Planning Team by implementing new system functionality and technology.
Core Insurance System-On March 29, Perr and Knight, Inc. was contracted to provide consulting services for core insurance requirements including collection, specification and solicitation. The project’s implementation has been impacted by higher-priority projects and its schedule and contract milestones are currently being evaluated.
2010 Rate Filing-Citizens’ IT Department has been working with the Product Development Department to define system requirements that will allow for a rate increase capped at 10 percent per policyholder as provided in HB 1495, which was recently signed into law. New notices and forms will be implemented, and a restructuring of the personal residential line of business will be completed. The target implementation date is November 1, 2009 in order to allow an adequate amount of time to notify policyholders before the mandated January 1, 2010 effective date.
To view updates of application development projects, click here.
First Quarter 2009 Accomplishments
Citizens’ IT Department first quarter of 2009 accomplishments included:
- Initiation of the 2010 rate filing project
- Execution of a service contract with Perr and Knight for the core insurance system project
- Completion of weekly operations reports for the enterprise dashboard proof-of-concept phase
- Implementation of a new correspondence handling and tracking system
- Implementation of new accounting general ledger software
- Mission-critical systems test for the IT disaster recovery program
- Ongoing activity on the business continuity program
- Implementation of the corporate data center project
To view the full list of first quarter 2009 accomplishments, click here.
The meeting was then adjourned. The next Committee meeting is scheduled to be held on August 27, 2009.
Should you have any questions or comments, please contact Colodny Fass.
To unsubscribe from this newsletter, please send an e-mail to ccochran@cftlaw.com