Internal Control Certification (ICC) Coming Soon; Don’t forget to update your Statewide Key Contacts
The Annual Internal Control Certification (ICC) to confirm internal controls, monitoring and training is coming soon and will be due in mid-June. Since departments are still in conversion to Mosaic we have abbreviated the ICC process this year. Departments are not expected to have updated internal controls completely for FY2026. Departments will describe what has already been done to update internal controls and what they plan to do in FY2027.
The Internal Controls Officer (ICO) listed on the Statewide Key Contact Lists page is responsible for assisting with the timely submission of the ICC. Please make sure that the listed ICO and other Statewide Key Contacts are up to date so that your department does not miss key information.
To update your ICO or any other Statewide Key Contact, view the next section.
Follow the Key Contacts update Job Aid available on PowerDMS that walks through the update process.
Job Aid: Using DocuSign to update a Key Contact
Bookmark our CTR Compliance Corner as your one-stop shop for alerts and success factors that you can integrate into your daily operations to keep you safe on your mission.
REMINDER: Process for Departments to Update Key Contacts
Each department has designated personnel responsible for a specific set of duties, as detailed in the CTR Key State Finance Law Compliance Roles and Responsibilities Policy. These “key contacts” are considered the main contact for the associated business area described in the policy, and are responsible for ensuring that communications from the Office of the Comptroller are forwarded to impacted personnel within their department. These instructions are also available on PowerDMS: Job Aid: Using DocuSign to Update a Key Contact.
Each department is responsible for ensuring that the contacts on file with the Office of the Comptroller are up to date at all times. Incorrect key contacts can result in missed or delayed communications from the Office of the Comptroller.
Per the Key State Finance Law Compliance Roles and Responsibilities Policy, departments must designate a new key contact when the one assigned leaves that role. In the lack of a designation, the position reverts to the Department Head.
Please view the policy for eligibility requirements for Key State Finance Law Compliance Roles.
How to verify a Key Contact
The Office of the Comptroller maintains its key contacts lists at this page on MAComptroller.org [MAGNet or Commonwealth-issued VPN required].
How to designate a Key Contact
A department designates a Key Contact by submitting a Key Contacts Update Form, located on the CTR Intranet E-Signatures page [MAGNet or Commonwealth-issued VPN required], or by requesting a form from [email protected].
Complete the form using the designee’s business address (not personal information).
A person can be assigned multiple roles, with the exception of both Primary and Backup Department Security Officer. Please submit one form per employee.
Job Aid: Updating a Key Contact
If your office moves
For address, title, and phone number updates, a key contact designee should email [email protected].
For questions about this process, please contact the CTR Solution Desk.