To prevent a disruption in services due to increased unemployment insurance claims, the Commission contracted with certain providers
to expand call center and identity verification services. Those contracts were executed pursuant to the Governor’s disaster declaration;
therefore, they were not required to comply with all state statutes or administrative rules for contracting and procurement.
However, the Commission did not have a process to document its decision-making process or rationale for waiving certain statutes or rules.
For example, the Commission did not include certain clauses designed to safeguard its data, such as the prohibition against accessing the
network from outside the United States. In addition, the Commission did not enforce contract provisions requiring background checks for
vendors' key personnel. While those actions were allowed by the disaster declaration, they did increase risk to the Commission’s data
and operations. In addition, not documenting its reasons for waiving certain requirements limits the Commission’s ability to evaluate
the effectiveness of those decisions.
Jump to Chapter 1