Text · page 2 of 15
Contents Report Highlights . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 Network Management . . . . . . . . . . . . . . . . . . . . . . . . . . . 2 How Should Officials Manage Network User Accounts?. . . . . . . . . 2 City Officials Did Not Adequately Manage Network User Accounts . . . 2 Why Should the City Have Written IT Policies and Security Awareness Training?. . . . . . . . . . . . . . . . . . . . . . . . . . . 3 City Employees Were Not Provided With IT Policies or IT Security Awareness Training. . . . . . . . . . . . . . . . . . . . . . . 4 Why Should the City Have a Written IT Contingency Plan?. . . . . . . 5 City Officials Did Not Have a Written IT Contingency Plan . . . . . . . 5 What Do We Recommend? . . . . . . . . . . . . . . . . . . . . . . . 5 Appendix A – Response From City Officials. . . . . . . . . . . . . . . 7 Appendix B – Audit Methodology and Standards . . . . . . . . . . . 11 Appendix C – Resources and Services. . . . . . . . . . . . . . . . . 12