Senate Democrats on Tuesday announced a wide?ranging package they say is designed to prevent fraud in state programs, strengthen oversight, and rebuild trust with Minnesotans who rely on those services.
DFL leaders said recent high?profile fraud cases have exposed long?standing weaknesses in how the state monitors providers, verifies services, and responds to red flags.
Senate Majority Leader Erin Murphy said the public’s frustration is justified. “Minnesotans are rightfully angry,” she said. “Fraud undermines trust, and we have a responsibility to restore confidence in the systems that serve seniors, families, and people with disabilities.”
RELATED: Walz shares plan to ‘transform’ largest Minnesota state agency, combat fraud
New statewide watchdog
A central piece of the package is the creation of a statewide Office of Inspector General (OIG), a proposal Democrats say would give…
IT & DATA SECURITY (MITIGATING THE “INSIDER THREAT”)
As seen in the TD Bank case, an employee with too much “access” can sell your customer data to syndicates.
- Principle of Least Privilege (PoLP): Employees should only have access to the specific folders and databases required for their current task.
- Access Revocation: Have a “Termination Checklist” that ensures all digital access (Email, VPN, Banking) is revoked within 60 minutes of an employee resigning or being dismissed.
- System Logs & Audit Trails: Enable “Read/Write Logging” on your server. If a customer’s data is leaked, you need to know exactly which login accessed that record and at what time.
- Encryption at Rest: Ensure that sensitive files (like your customer ID numbers or payroll spreadsheets) are encrypted so that if a staff member copies them to a USB, they cannot be read.