Southtowns Record

City of Lackawanna – Network Management and Internal Controls (2021M-215)

Government
City of Lackawanna
Posted by publisher
Apr 8, 2022
Kind
State audit
Topics
Audits and oversight, Budget and taxes

Publisher's summary

City officials did not establish adequate controls to safeguard the network against unauthorized access or disruption.

Original document

Text · page 8 of 15

Read the whole document on one page (all 15 pages, each with its own heading)

3. Develops written procedures for managing network access that include
  periodically reviewing network user accounts and disabling user accounts
  when access is no longer needed for the network.

  4. Provides periodic IT security awareness training to all personnel who use
  IT resources that includes guidance on the importance of appropriate
  computer use.

The Council and City officials should:

  5. Develop and adopt comprehensive written IT security policies to define
  appropriate user behavior and explain the consequences of policy
  violations.

  6. Develop and adopt a comprehensive written IT contingency plan.

6  Of f ic e of t he New York State Comptroller