-

 



U.S. DEPARTMENT OF LABOR
Employment and Training Administration
Washington, D. C. 20210

CLASSIFICATION

UI/BPC

CORRESPONDENCE SYMBOL

TEUMC

ISSUE DATE

May 30, 1995

RESCISSIONS

None

EXPIRATION DATE

May 31, 1996

DIRECTIVE

:

UNEMPLOYMENT INSURANCE PROGRAM LETTER NO. 31-95

 

TO

:

ALL STATE EMPLOYMENT SECURITY AGENCIES

 

FROM

:

MARY ANN WYRSCH
Director
Unemployment Insurance Service

 

SUBJECT

:

On-Site Studies for the Risk Analysis Project

  1. Purpose. To provide information on the status of the Risk Analysis Project and to identify specific State Employment Security Agencies (SESAs) in which on-site studies will be conducted. SESAs selected for on-site study are Alaska, California, Colorado, Florida, Iowa, Maine, Maryland, and New York.

  2. References.

    1. Unemployment Insurance Program Letter (UIPL) No. 12-95, Risk Analysis Project.

    2. ETA Handbook No. 376, Guidelines for Internal Security in UI Operations

  3. Background. UIPL 12-95, dated January 5, 1995, provided information about the Risk Analysis Project, and informed SESAs that the California Employment Development Department (EDD) had entered into a cooperative agreement with the Unemployment Insurance Service to carry out the project beginning October 1, 1994. UIPL 12-95 also identified the specific project objectives and products which will be available as a result of the Risk Analysis Project.

    The objectives of the Risk Analysis Project include:

    1. Identifying specific weaknesses and future areas of vulnerability within the overall UI system;

    2. Evaluating risk analysis policies and guidelines;

    3. Evaluating automated risk analysis products; and

    4. Providing recommendations, approaches, training and analytical tools to assist SESAs in assessing vulnerabilities.

    The products which will be available to all SESAs as a result of the Risk Analysis Project include:

    1. Analysis of program/system vulnerabilities and recommendations for minimizing identified vulnerabilities;

    2. An evaluation of automated risk analysis tools; and

    3. Risk Analysis training courses/seminars which will provide training at the entry, intermediate and advanced levels, including the use of automated methods and software in conducting a SESA UI risk analysis.

  4. Project Status. The California EDD Risk Analysis Project staff have conducted the following activities to date:

    1. Formed an Advisory Work Group (AWG) responsible for reviewing and commenting on project deliverables and assisting in formulating the project's scope, objectives, methodology, and timelines. (The AWG is comprised of 6 State staff - from Alabama, California, Idaho, New Jersey, Oregon, and Texas - and 2 federal staff).

    2. Convened two meetings of the AWG for the purpose of reviewing and commenting on project deliverables, study methodology, and setting timelines.

    3. Categorized and determined risk analysis training needs of SESAs based on input from all SESAs.

    4. Started the process of evaluating risk analysis software.

    5. Developed the methodology and questionnaire to be used when visiting selected SESAs for the on-site studies.

    On-site reviews will be conducted in Alaska, California, Colorado, Florida, Iowa, Maine, Maryland, and New York. (Advisory Work Group members will conduct on-site reviews of their respective SESAs -- Alabama, New Jersey, Oregon and Texas). The on-site studies will be performed from May 1, 1995, through August 30, 1995. The assistance and cooperation of the selected SESAs, the AWG SESAs and the California EDD Risk Analysis Project staff are vital to the successful outcome of the project. A representative from the California EDD Risk Analysis Project staff will be in contact with the selected SESAs to arrange for convenient dates to visit the States and to answer any questions about the study.

    Individual SESA data from the on-site studies will not be disclosed.

  5. Action Required. SESA Administrators of the selected SESAs are requested to:

    1. Assist and cooperate with the California EDD Risk Analysis Project staff in conducting on-site studies.

    2. Insure that all appropriate SESA staff of the selected SESA are aware of and familiar with the material in this UIPL.

  6. Inquiries. Inquiries should be directed to the appropriate Regional Office.