Skip to Content

Login   Subscribe   Site Index   Contact Us   Google Translate™

NYS Comptroller

THOMAS P. DiNAPOLI

Audits of Local Governments and School Districts

Report Highlights

Charlotte Valley Central School District - Information Technology (2019M-27)

Released: September 27, 2019 -- [read complete report - pdf]

Audit Objective

Determine whether the Board and District officials ensured District information technology (IT) assets and computerized data were safeguarded.

Key Findings

  • The Board and District officials did not monitor computer use policies or adopt adequate IT security policies.
  • District officials did not develop procedures for managing, limiting and monitoring user accounts and permissions and securing personal, private and sensitive information (PPSI).
  • District officials did not provide IT security awareness training for District employees.

In addition, sensitive IT control weaknesses were communicated confidentially to District officials.

Key Recommendations

  • Adopt and monitor comprehensive IT security policies.
  • Develop comprehensive procedures for managing, limiting and monitoring user accounts and permissions and securing PPSI.
  • Provide periodic IT security awareness training to personnel who use IT resources.

District officials generally agreed with our recommendations and have initiated or indicated they planned to initiate corrective action.

Background

The Charlotte Valley Central School District (District) serves seven towns in Delaware, Otsego and Schoharie counties.

The District is governed by a five-member Board of Education (Board) that is responsible for the general management and control of the District’s financial and education affairs. The Superintendent of Schools (Superintendent) is the District’s chief executive officer and is responsible for the District’s administration.

The District contracted with Otsego Northern Catskill Board of Cooperative Educational Services (ONC BOCES) to provide IT services, including an IT coordinator. The IT coordinator was the District’s network administrator and was responsible for the overall management of the District’s IT infrastructure.

Quick Facts
Student Enrollment390
Employees120
# of Desktop, Laptop and Tablet Computers538
Server Computers2

Audit Period

July 1, 2017 – December 6, 2018

We extended our audit period to August 10, 2010 to review employee Internet usage.


Local Government and School Accountability Contact Information:

Phone: (518) 474-4037; Email: localgov@osc.ny.gov
Address: Office of the State Comptroller, Division of Local Government and School Accountability
110 State Street, 12th Floor; Albany, NY 12236