Rye Neck Union Free School District – Information Technology (2016M-280)

Issued Date
November 10, 2016

Purpose of Audit

The objective of our audit was to determine whether the District adequately safeguarded sensitive data stored on District computer systems for the period July 1, 2014 through March 31, 2016.

Background

The Rye Neck Union Free School District is located in the Town of Mamaroneck in Westchester County. The District, which operates four schools with approximately 1,550 students, is governed by an elected six-member Board of Education. Budgeted appropriations for the 2015-16 fiscal year totaled approximately $39.6 million.

Key Findings

  • The District does not have adequate policies and procedures for personal, private and sensitive information (PPSI) data classification.
  • The Board has not developed adequate policy and procedures to ensure that District employees receive proper cyber security training to protect District assets.

Key Recommendations

  • Inventory and classify by security level all PPSI maintained on District computer systems.
  • Ensure that employees receive formal IT security training on an ongoing basis that reflects current risks identified by the IT commun