Skip to Content

Login   Subscribe   Site Index   Contact Us   Google Translate™

NYS Comptroller

THOMAS P. DiNAPOLI

Audits of Local Governments and School Districts

Report Highlights

DeRuyter Central School District - Information Technology (2019M-175)

Released: December 13, 2019 -- [read complete report - pdf]

Audit Objective

Determine whether District officials ensured students’ personal, private and sensitive information (PPSI) was adequately protected from unauthorized access, use and loss.

Key Findings

District officials did not:

  • Limit or monitor employees’ personal Internet browsing and their use of social media on District computers.
  • Provide IT security awareness training to employees.
  • Restrict user permissions to the network and the student information system software application (SIS) based on job duties.
  • Disable unneeded network and local user accounts.

Sensitive information technology (IT) control weaknesses were communicated confidentially to officials.

Key Recommendations

  • Review and update the acceptable computer use policy and monitor employees’ personal Internet browsing and use of social media.
  • Provide formal IT security awareness training to employees.
  • Evaluate network and SIS user permissions to ensure users only have the permissions needed for their job duties and disable any unneeded user accounts.

District officials generally agreed with our recommendations and indicated they planned to initiate corrective action.

Background

DeRuyter Central School District (District) serves the Towns of DeRuyter, Cazenovia, Georgetown and Nelson in Madison County, Lincklaen and Otselic in Chenango County, Fabius in Onondaga County and Cuyler in Cortland County.

The District is governed by a five-member Board of Education (Board) that is responsible for the general management and control of educational and financial affairs. The Superintendent of Schools (Superintendent) is the chief executive officer and is responsible, along with other administrative staff, for day-to-day management. The District’s Technology Coordinator is responsible for managing the IT environment and resources.

Quick Facts
Enrollment359
Employees192
Total Network Accounts507
Desktop, Laptop and Tablet Computers615

Audit Period

July 1, 2017 – January 31, 2019

We expanded our audit period forward to March 26, 2019 to review IT data.


Local Government and School Accountability Contact Information:

Phone: (518) 474-4037; Email: localgov@osc.ny.gov
Address: Office of the State Comptroller, Division of Local Government and School Accountability
110 State Street, 12th Floor; Albany, NY 12236