Ramsey County Sheriff's Office

What the audit said

Agreed-Upon Procedures engagement (auditor expresses no overall opinion). 3 of 8 tested procedures had exceptions: (1) Public log of use — Vigilant system had no consolidated report meeting the statutory format, could not produce log data beyond 60 days, and didn't track user log-out times. (2) Access authorization — 15 of 47 users as of Nov 2017 lacked written authorization (corrected 2017-12-28, before the report issued). (3) Data destruction — some ALPR data retained beyond the 60-day statutory max via a 'Preserve' function with no corresponding 'Unpreserve'/release capability. 5 of 8 procedures (policy, data-type limits, data classification, no fixed-ALPR N/A, audit-trail existence) were compliant with no exceptions noted.

FinePrint notes

Found via direct search of the MN Office of the State Auditor's site — not indexed under LRL's mandated-reports collection (Filing Year/LRL Doc Number left blank; schema's Filing Year options start at 2024 and this predates LRL indexing for this beat). 'Independent Auditor's Report on Applying Agreed-Upon Procedures,' MN OSA (Rebecca Otto, State Auditor; Greg Hierlinger, CPA, Deputy State Auditor) — signed 2018-01-04; audit trail reviewed through 2017-10-23, follow-up user-access pull 2018-01-03. Vendor: Vigilant Solutions (not in the standard vendor list — filed as Other/Multiple). 2 mobile ALPR units, only 1 active during the period; county has never had fixed/stationary units. Auditor: 'Other' since MN OSA is a state oversight office, not a private consultant, a consortium like LOGIS/MNSec, or the county's own in-house auditor; Independence/LE-background flags left false — no conflict indicated. This is the ONLY ALPR audit located for this agency and it is now nearly a decade old — Ramsey County SO very likely owes one or more subsequent biennial audits (2020/2022/2024/2026 cycles) that were not located this pass. Strong candidate for a follow-up search specifically for a more recent Ramsey County SO ALPR audit.