Open Government: Transparency, Participation, Collaboration

Open Government Internal Controls

To improve the quality of information available to the public, the Open Government Directive requires agencies to submit plans detailing internal controls over information quality and to ensure adequate systems and processes are in place to promote conformity with OMB guidance.

CGI's Open Government Internal Controls offering helps clients automate their internal control monitoring across multiple agency data sources. The offering combines the market-leading Approva BizRights® continuous controls monitoring platform with CGI's Authorizations Insight for Momentum®. Agencies can choose to implement the solution at their site or as software-as-a-service hosted onshore in the United States at CGI facilities that are fully compliant with federal IT security standards.

Capabilities include:

  • Automated monitoring of user activity and sensitive transactions-through automated controls monitoring and proactive alerts, such as e-mail notification to managers when new issues are uncovered and alerts to federal management teams when violations occur
  • Fast implementation through pre-configured best practice rules and content-including a rich library of pre-defined and customizable business rules, reports, and alerts, allowing for quick set-up without deep expertise in agency business systems or assistance from security managers
  • Cross-application analysis-analyzing separation of duties violations and user activity across financial systems, program systems and legacy applications for an enterprise view of internal controls
  • Streamlined audit preparation-documenting all remediation activities to satisfy regulatory, security and audit requirements; violations uncovered; and remediation actions

With this approach, CGI helps clients automate internal controls by monitoring security and permissions data from across the enterprise. This allows clients to proactively identify and fix potential issues in advance of future audits, preventing potential ‘non-compliance' findings.

Solution resources