DiNapoli's Office Completes Audit of the Cairo-Durham Central School District
New York State Comptroller Thomas P. DiNapoli today announced his office completed the audit: Cairo-Durham Central School District – Internal Controls Over Information Technology and Cash Disbursements.
“As Comptroller, I’m committed to using the audit process to make sure state and local governments run as efficiently as possible,” DiNapoli said. “The Cairo-Durham Central School District failed to properly safeguard its information technology. The district should develop a security plan to ensure IT risks are not overlooked and internal controls are in place to minimize any potential risks and better protect taxpayer dollars.”
DiNapoli’s auditors found that district officials failed to develop a formal security plan and written policies and procedures to effectively safeguard IT resources. District officials are not restricting physical access to IT servers and wiring closets, and this equipment is not protected from environmental hazards.
Further, DiNapoli’s auditors noted that both the treasurer and the business manager have system administrator rights to, and are users of, the district’s financial software, while other employees have access to areas of the software that are not consistent with their job responsibilities. In addition, the district’s financial backups are not stored at a secure offsite location, are not periodically restored or tested by district personnel and are not encrypted.
Finally, DiNapoli’s auditors found that the board failed to develop a disaster recovery plan, and controls over the district’s cash disbursements could be improved.
For a full copy of the audit, click here.
If you have any questions, or would like a comment from the Comptroller’s press office regarding this audit, please call 518-474-4015, or send an email to email@example.com.