Southtowns Record

Hamburg Central School District - Information Technology (2019M-10)

Government
Hamburg Central School District
Posted by publisher
Jul 3, 2019
Kind
State audit
Topics
Audits and oversight, Parks and recreation

Publisher's summary

District officials did not provide information technology (IT) cybersecurity awareness training for individuals who used District IT assets. In addition, personal Internet use was found on computers assigned to four employees who routinely accessed personal, private and sensitive information (PPSI). Finally, the Board and District officials have not established a disaster recovery plan.

Original document

Text · page 14 of 16

Read the whole document on one page (all 16 pages, each with its own heading)

Unless otherwise indicated in this report, samples for testing were selected
based on professional judgment, as it was not the intent to project the results
onto the entire population. Where applicable, information is presented concerning
the value and/or size of the relevant population and the sample selected for
examination.

A written corrective action plan (CAP) that addresses the findings and
recommendations in this report must be prepared and provided to our office within
90 days, pursuant to Section 35 of General Municipal Law, Section 2116-1(3)(c)
of New York State Education Law and Section 170.12 of the Regulations of the
Commissioner of Education. To the extent practicable, implementation of the CAP
must begin by the end of the fiscal year. For more information on preparing and
filing your CAP, please refer to our brochure, Responding to an OSC Audit Report,
which you received with the draft audit report. We encourage the Board to make
the CAP available for public review in the District Clerk’s office.

12  Of f ic e of t he New York State Comptroller