Skip to Content

Login   Subscribe   Site Index   Contact Us   Google Translate™

NYS Comptroller

THOMAS P. DiNAPOLI

Audits of Local Governments and School Districts


Town of Ithaca – Information Technology (2017M-52)


Released: June 16, 2017 -- [read complete report - pdf]

Purpose of Audit

The purpose of our audit was to assess the Town’s IT policies and procedures for the period January 1, 2015 through December 22, 2016.

Background

The Town of Ithaca is located in Tompkins County and has a population of approximately 20,000. The Town is governed by an elected seven-member Town Board. Budgeted appropriations for 2017 total approximately $25 million.

Key Findings

  • The Town’s IT policy does not address password security, wireless security, mobile computing and storage devices or online banking.
  • Town employees did not receive sufficient IT security and awareness training during our audit scope.
  • Town officials have not established written data backup policies and the emergency plan does not specifically include IT procedures to maintain day-to-day operations.

Key Recommendations

  • Update the IT policy to address password security, wireless security, mobile computing and storage devices and online banking.
  • Require that all staff receive formal IT security and awareness training at least annually.
  • Prepare, test and periodically review an IT contingency plan that specifically addresses backup policies and procedures to maintain day-to-day operations.

Local Government and School Accountability Contact Information:

Phone: (518) 474-4037; Email: localgov@osc.state.ny.us
Address: Office of the State Comptroller, Division of Local Government and School Accountability
110 State Street, 12th Floor; Albany, NY 12236