Report 2024-28
Why this audit is important
The Oregon Driver and Motor Vehicle Services Division (DMV) serves over 8,000 people on average each day and 2 million each year.
The Oregon License Issuance and Vehicle Registration system (OLIVR) uses FAST Enterprises’ FastDS-VS® software application for DMV’s legacy system replacement from the 1960s.
Before the implementation of OLIVR in 2019, DMV had only three online services. DMV now offers over 20 online services.
OLIVR application allows for real-time data access, a feature used by many DMV partners, such as law enforcement and vehicle dealerships, which access more than 141,000 records each day.
What we found
-
OLIVR accurately assesses and collects fees for issuing Oregon drivers licenses and vehicle registrations.
-
OLIVR accurately and reliably transfers system transaction data into ODOT's main accounting system, the Transportation Environment Accounting and Management System.
-
While some measures have been taken to help ensure Oregon DMV web content is accessible to persons with disabilities and has appropriate language alternatives for customers who have limited English proficiency, more work still needs to be done to ensure non-English speaking users have access to DMV services through their web portal.
-
Department management has implemented important protection measures for system security, such as multifactor authentication, system logging, and role-based access, but additional process improvements are needed to better secure the system and its data. Weaknesses related to the department's processes for granting and reviewing system access, lack of detailed application security plans, as well as a lack of appropriate periodic security risk assessments.
-
OLIVR computer code modifications are appropriately controlled to ensure the integrity of the system data is maintained.
What we recommend
We made nine recommendations to the DMV. The division agreed with all of our recommendations. The response can be found at the end of the report.
