[read complete report - pdf]

Audit Objective

Determine whether Chester Union Free School District (District) officials adequately managed and monitored network user accounts.

Key Findings

District officials did not adequately manage and monitor network user accounts. District officials should have:

• Disabled unneeded network user accounts when there was no longer a need for them.
• Monitored network user compliance with the District’s computer acceptable use policy (AUP) by reviewing computer website history logs for appropriateness.

Sensitive information technology (IT) control weaknesses were communicated confidentially to officials.

Key Recommendations

• Routinely evaluate and disable any unneeded network user accounts.
• Monitor Internet use to ensure network users comply with the AUP.

District officials agreed with our recommendations and have initiated or indicated they planned to initiate corrective action.