While the District's non-payroll disbursements were supported, for proper District purposes and audited prior to payment, the Board of Fire Commissioners (Board) did not ensure purchases were made at the best price.

Officials did not always seek competition for professional services and ensure bid specifications were met.

The Board and District officials did not manage the Project in a transparent manner and did not provide adequate oversight.

The Board and District officials did not adequately safeguard computerized data from unauthorized use, access and loss. In addition to sensitive IT control weaknesses that were communicated confidentially to officials.

The Board and Director did not provide adequate oversight of financial operations. The Board did not adopt written policies and the Director did not develop proper internal controls over cash disbursements and electronic payments or financial system user access.

District officials did not ensure employees' salaries and wages were always paid accurately.

BOCES officials did not establish adequate controls over network user accounts. As a result, BOCES has an increased risk of unauthorized access to and use of the BOCES network and potential loss of important data. In addition to sensitive information technology (IT) control weaknesses that were confidentially communicated to officials.

Town officials did not adequately monitor Town vehicles and fuel usage. As a result, Town officials did not know if Town vehicles and fuel were only used for Town business.

The Board did not adopt realistic budgets or effectively manage fund balance.

District officials did not adequately safeguard MCDs to help prevent unauthorized access to PPSI. In addition to sensitive information technology (IT) control weaknesses that were communicated confidentially to officials.

The Board and District officials did not effectively manage the District's fund balance.

District officials did not ensure that network and financial software access controls were adequate to protect District IT systems and data from unauthorized access or loss. Sensitive network and financial software access control weaknesses were communicated confidentially to officials.

The Board and District officials did not adequately monitor the Shop's financial condition or safeguard District assets, resulting in a 36-month operational deficit totaling $676,389. As a result, District taxpayers are paying for the majority of the costs for providing services that do not benefit them.

The Board and District officials did not properly manage fund balance in accordance with statute.

District officials did not appropriately track and inventory IT equipment.

District officials did not always seek competition or comply with the District's procurement policy when procuring professional services.

District officials did not ensure employees' payroll payments and leave accruals were accurate, properly approved and supported. We attribute the audit findings to inadequate Board oversight, policies and procedures and segregation of duties.

Town officials did not establish adequate access controls to help safeguard information technology (IT) systems against unauthorized access.

The Board and District officials did not adequately manage the District's financial condition and the current findings and recommendations are similar to our November 2016 Financial Condition audit report.

District officials could not always support competition was sought when purchasing goods and services that fell below the statutory bidding thresholds.