Hamburg Central School District - Information Technology (2019M-10)

Government: Hamburg Central School District
Posted by publisher: Jul 3, 2019
Kind: State audit
Topics: Audits and oversight, Parks and recreation

Publisher's summary

District officials did not provide information technology (IT) cybersecurity awareness training for individuals who used District IT assets. In addition, personal Internet use was found on computers assigned to four employees who routinely accessed personal, private and sensitive information (PPSI). Finally, the Board and District officials have not established a disaster recovery plan.

Original document

Download our archived copy (PDF, 561 KB, saved Oct 20, 2026)
View on the publisher's website (may have moved or changed since)

Text · page 7 of 16

3. Ensure BOCES provides all services that the District has contracted for,
  specifically a disaster recovery plan template and assistance to help refine
  the plan for the District’s needs.

The Director and District officials should:

  4. Provide, or coordinate the provision of, periodic IT cybersecurity
  awareness training to employees and students who use District IT
  resources.

  5. Monitor personal computer and Internet use to ensure employees and
  students comply with the AUP and corresponding regulations.

  Of f ic e of t he New York State Comptroller  5