[read complete report - pdf]

Audit Objective

Determine whether District officials ensured online banking transactions were appropriate and secure.

Key Findings

District officials did not:

• Follow the Board’s online banking policy or develop procedures to adequately segregate online banking duties.
• Ensure that authorized access to online bank accounts was limited.
• Provide information technology (IT) security awareness training to employees.

In addition, sensitive IT control weaknesses were communicated confidentially to District officials.

Key Recommendations

• Enforce the online banking policy and develop procedures to adequately segregate online banking duties.
• Designate one computer to be used strictly for online banking transactions.
• Ensure that officials and employees receive adequate IT security awareness training.

District officials agreed with our recommendations and indicated they have begun to initiate corrective action.