Pr. William tightens security in wake of IT scandal
By: David Sherfinski
Examiner Staff Writer
August 3, 2009
Prince William has taken a number of steps to tighten controls in its information technology department after one of the biggest embezzlement schemes in county history was revealed two months ago.
A review of the Office of Information Technology's operational and financial status is under way, and a number of internal controls have been added to the system, according to a presentation to be delivered Tuesday by Deputy County Executive Melissa Peacor.
Four individuals were indicted in June on 153 state charges, which included bid rigging, forgery and money laundering. The scheme involved about $8 million in contracts approved by the county for several companies. An investigation accuses the suspects of falsifying bids and creating shell companies to be awarded county projects.
Maneesh Gupta, former OIT systems division chief, was fired in May as the investigation began. Former county employee John Roessler, his brother Vernon Roessler, and Richard Billingsley of Springfield were indicted. Two other OIT workers have been fired for their alleged involvement in the plot.
The county is also in the process of hiring a new chief information officer, county spokeswoman Liz Bahrns said. Former OIT Director Massoud Nourbakhsh, though not charged with any crimes in the scheme, resigned in the wake of the investigation.
Before now, one person in information technology was responsible for all steps involving contract controls. Now several additional review steps have been added, including review from the project manager, management and fiscal analyst, division director, and acting chief information officer.
The county's finance director is also looking at all county contracts to check what agency controls and review processes are in place, the presentation said.
To foster increased responsibility in OIT, project managers are now also responsible for project budgets and implementation. Previously, project managers were not allowed to have budget responsibility or control in the Information Systems Division. A county training program for OIT project managers has also been added.
In addition, an Internal Control Council is being established to advise management and employees on how to reduce the risk of asset loss and ensure the reliability of financial statements. The county has contracted with consulting group RSM McGladrey to perform a review of controls and security in the IT department.
