Southtowns Record

Hamburg Central School District - Information Technology (2019M-10)

Government
Hamburg Central School District
Posted by publisher
Jul 3, 2019
Kind
State audit
Topics
Audits and oversight, Parks and recreation

Publisher's summary

District officials did not provide information technology (IT) cybersecurity awareness training for individuals who used District IT assets. In addition, personal Internet use was found on computers assigned to four employees who routinely accessed personal, private and sensitive information (PPSI). Finally, the Board and District officials have not established a disaster recovery plan.

Original document

Text · page 12 of 16

Appendix B: OSC Comment on the District’s Response

Note 1

While the District’s email filtering system and firewalls provide some security
to the network, an email filtering system does not address the risk of using
District computers to access personal email. Further, firewalls would not prevent
malicious content on the Internet from reaching a District computer when that
content is requested by the user (intentionally or inadvertently) or when the
computer is not connected to the network.

10  Of f ic e of t he New York State Comptroller