Text · page 10 of 16
8 Of f ic e of t he New York State Comptroller
District officials did not provide information technology (IT) cybersecurity awareness training for individuals who used District IT assets. In addition, personal Internet use was found on computers assigned to four employees who routinely accessed personal, private and sensitive information (PPSI). Finally, the Board and District officials have not established a disaster recovery plan.
8 Of f ic e of t he New York State Comptroller