The Status of Enterprise Architecture and Information Technology
Investment Management in the Department of Justice

Audit Report 06-02
November 2005
Office of the Inspector General

In planning and performing our audit of the Department's management of its Enterprise Architecture and IT investments, we considered the Department's internal controls for the purpose of determining our audit procedures. This evaluation was not made for the purpose of providing assurance on the internal control structure as a whole. However, we noted certain matters that we consider to be reportable conditions under Government Auditing Standards. Reportable conditions involve matters coming to our attention relating to significant deficiencies in the design or operation of the internal control structure that, in our judgment, could adversely affect the Department's ability to manage its Enterprise Architecture and IT investments. During our audit, we identified the following internal control concerns. The Department has not yet completed an Enterprise Architecture to drive its IT investments. The Department has not yet implemented the control and evaluate processes necessary to complete its IT investment capability. The Department does not provide adequate oversight of components' Enterprise Architecture and ITIM efforts. Because we are not expressing an opinion on the Department's internal control structure as a whole, this statement is intended solely for the information and use of the Department in managing its Enterprise Architecture and IT investments. This restriction is not intended to limit the distribution of this report, which is a matter of public record.