True North Rochester Preparatory Charter School - Information Technology (2019M-148)

Issued Date
October 18, 2019

[read complete report - pdf]

Audit Objective

Determine whether the Board and School officials ensured information technology (IT) assets were safeguarded.

Key Findings

  • The Board did not adopt adequate IT policies or a disaster recovery plan.
  • School officials did not provide IT security awareness training to staff.
  • Hardware and software inventory records were inaccurate and outdated.

In addition, sensitive IT control weaknesses were communicated confidentially to School officials.

Key Recommendations

  • Adopt comprehensive IT policies and procedures and a disaster recovery plan.
  • Provide security awareness training to staff and maintain complete and up-to-date hardware and software inventory records.

School officials agreed with our recommendations and have initiated or indicated they planned to initiate corrective action.