DoIT - Remote Access Follow-up Review

C i t y  o f  M e s a  A u d i t o r  |  J u l y  3 1 ,  2 0 2 5  
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
Remote Access Follow-up Review 
Department of Innovation and Technology

DoIT – Remote Access Follow-up Review 
OBJECTIVES 
The objective of this follow-up review was to determine whether the Department of Innovation and 
Technology effectively implemented the action plan based on the recommendation from the July 2024 
Remote Access audit report. 
 
BACKGROUND 
On July 16, 2024, we issued a report on our audit of the Department of Innovation and Technology Remote 
Access. The objective of the audit was to determine whether effective controls are in place to ensure risks 
related to remote access to the City’s network are minimized and connectivity between the network and 
remote users is secure. The audit report included one recommendation to develop and implement formal 
policies and procedures for managing remote access virtual private network (VPN). The department agreed 
with the recommendation and developed an action plan to implement the recommended change. 
CONCLUSION 
The recommendation has been implemented and is summarized below: 
Recommendation 
Status 
1-1:  The department should develop and implement policies and 
procedures for managing remote access VPN that address the 
following: 
o Roles and responsibilities of staff involved in VPN 
management.  
o The process for ensuring its VPN client is secure and 
undergoes the required scheduled maintenance.  
o The process for detecting and responding to VPN-related 
issues, including establishing an incident response plan for 
addressing incidents such as VPN security breaches.  
o Continuously reviewing and updating its policies and 
procedures to ensure it appropriately addresses evolving 
security threats and advances in VPN technology.  


The City Auditor’s office provides audit, consulting, and investigative 
services to identify and minimize risk, maximize efficiencies, improve 
internal controls, and strengthen accountability to Mesa’s citizens. We 
serve as an independent resource to City Management and the City 
Council, to provide them with timely, accurate, and objective information, 
assurances, and recommendations pertaining to City of Mesa programs 
and activities. 
Audit Team 
Ron Doba, Internal Auditor 
Michelle Hute, Sr. Internal Auditor 
City Auditor 
Joseph Lisitano, CPA, CIA 
Mesa City Auditor’s Office 
Phone: 480-644-5059 
Email: auditor.info@mesaaz.gov 
Website: https://www.mesaaz.gov/government/city-auditor 
Copies of our audit reports are available at: 
https://www.mesaaz.gov/government/city-auditor/audits