 Auditors find DMV’s data system is secure and accurately assesses and collects fees, but online services could be more accessible
SALEM, OR — In a largely positive audit released today, the Oregon Secretary of State Audits Division found the Oregon Driver and Motor Vehicle Services Division (DMV)’s data system for vehicle licensing and registration works well to accurately assess, collect, and transfer fees and data.
That data system is the Oregon License Issuance and Vehicle Registration system, otherwise known as OLIVR. Before the implementation of OLIVR in 2019, the DMV had only three online services. There are now more than 20 online services available to Oregonians, from renewing vehicle registrations to replacing a lost or damaged ID card.
The DMV serves an average of 8,000 people each day and more than 2 million each year — meaning millions of dollars in fees for licensing and vehicle registrations flows through this data system. Beyond fees, OLIVR also captures personally identifiable information for millions of Oregonians, including birth dates and home addresses.
For this reason, it is critically important that OLIVR have robust, functional controls in place to ensure the accuracy of its data and the protection of this sensitive information. Auditors focused on controls for this IT audit, evaluating the effectiveness of controls governing financial transaction data input, processing and output, and application security, among others.
Overall, the audit team found the OLIVR system accurately assesses and collects fees for issuing drivers licenses and vehicle registrations to Oregonians. Auditors also determined the system was secure, although there were some ways the department could further strengthen controls to better mitigate risk.
Specifically, auditors found the DMV could do a better job managing which employees have access to the system, strengthening passwords, and conducting more regular security risk assessments.
“Oregonians should be reassured by the findings in this audit, and the DMV should be happy with the work that’s already been done to implement and secure OLIVR,” said Audits Director Kip Memmott. “They’ve established a good foundation, but now it’s time to build on it and further strengthen IT controls.”
Auditors did identify one area in need of significant improvement: the accessibility of the system’s online services, specifically to Oregonians with disabilities or who are not proficient in English.
Auditors found the DMV’s public web portal lacked some accessibility features, such as multi-language support and support for the visually impaired.
For example, while the main DMV website has built-in language translation services, the service portal itself does not, relying instead on Google Translate within the web browser. The use of Google Translate in this context was not intuitive for users, inconsistent across pages, not functional on mobile devices, and could display error messages depending on the browser.
# # #
About the Oregon Audits Division
The division exists to fulfill the Secretary of State’s constitutional and statutory audit authority. We do this by auditing to protect the public interest and improve Oregon government. Our vision is to be the source of independent, reliable, useful, and timely information on state government operations and programs for the Governor, Legislature, and people of Oregon; and to provide transparency and accountability for the use of public resources.
About the Oregon Secretary of State
The Oregon Secretary of State is one of three constitutional offices created at statehood. Oregon’s Secretary of State is Oregon’s chief elections officer, chief auditor, chief archivist, and oversees business and nonprofit filings. The Secretary of State also serves as one of three members of the State Land Board and as the chair of the Oregon Sustainability Board. Under Article V, Section 8a of the Oregon Constitution, if there is a vacancy in the office of Governor, the Secretary of State becomes governor. As an independently elected constitutional officer, the Secretary of State answers directly and solely to the people of Oregon.
|
