Summary

SAI Somalia conducted a performance audit of the implementation of the Somali Custom Automated System (SOMCAS) by the Revenue Directorate. Auditors assessed SOMCAS's compliance with international system development standards, application and database controls, governance aspects of SOMCAS, as well as the integrity of the data processed and output by SOMCAS. SAI Somalia noted the following deficiencies: - the absence of IT governance and formal IT policies, along with a lack of formal controls in data center operations; - the lack of integration between SOMCAS and revenue collection systems; - incomplete and inadequately validated data; - inconsistent data in manifests, cleared declarations and cargo documentation; - utilization of an external system for customs valuation, posing significant legal and operational risks; - unprotected source code due to the absence of an escrow agreement for source code ownership; - the lack of formalized data backup and disaster recovery processes. SOMCAS offers significant promise for improving customs operations in Somalia, but realizing its full potential requires addressing its current operational and security deficiencies. To this end, SAI Somalia has prepared a comprehensive guideline on enhancing IT governance.