Text · page 3 of 16
Report Highlights Hamburg Central School District Audit Objective Background Determine whether information technology (IT) assets are properly safeguarded, secured and accessed for The Hamburg Central School appropriate District purposes. District (District) serves the Towns of Boston, Eden, Hamburg and Key Findings Orchard Park in Erie County. ll District officials did not provide IT cybersecurity The District is governed by an awareness training for individuals who used District IT elected seven-member Board assets. of Education (Board). The Superintendent of Schools ll Personal Internet use was found on computers (Superintendent) is the chief assigned to four employees who routinely accessed executive officer and is personal, private and sensitive information (PPSI). responsible, along with other In addition, sensitive IT control weaknesses were administrative staff, for the communicated confidentially to District officials. District’s day-to-day management under the Board’s direction. Key Recommendations The District employs a Director of Technology/Chief Information ll Provide periodic IT cybersecurity awareness training. Officer (Director) to manage its IT ll Provide adequate oversight of employee Internet department. use to ensure it complies with Board policies and regulations. Quick Facts Employee Network District officials generally agreed with our Accounts 631 recommendations and indicated they planned to initiate Student Network corrective action. Appendix B includes our comment on the Accounts 3,707 District’s response. Employee Computers 15 Examined Audit Period July 1, 2017 – September 11, 2018 Of f ic e of t he New York State Comptroller 1