Skip to Content

Login   Subscribe   Site Index   Contact Us   Google Translate™

NYS Comptroller

THOMAS P. DiNAPOLI

Audits of Local Governments and School Districts

Report Highlights

Forestville Central School District - Information Technology (2019M-170)

Released: February 21, 2020 -- [read complete report - pdf]

Audit Objective

Determine whether personal, private and sensitive information (PPSI) on, or accessed through, the District’s information technology (IT) system was properly safeguarded.

Key Findings

  • District officials did not provide formalized IT security awareness training for individuals who used the District’s IT assets.
  • Personal Internet use was found on computers assigned to employees who routinely accessed PPSI.
  • Network and application user accounts were not properly managed.

In addition, sensitive information technology control weaknesses were communicated confidentially to District officials.

Key Recommendations

  • Provide periodic IT security awareness training.
  • Develop and implement written administrative regulations to further define the District’s acceptable use policy guidelines.
  • Develop comprehensive written procedures for managing network and application user accounts.

District officials agreed with our recommendations and have initiated or indicated they planned to initiate corrective action.

Background

The Forestville Central School District (District) serves the Towns of Hanover, Sheridan, Villenova and Arkwright in Chautauqua County and the Town of Perrysburg in Cattaraugus County. The District is governed by an elected seven-member Board of Education (Board). The Board is responsible for the general management and control of the District’s financial and educational affairs.

The Superintendent of Schools (Superintendent) is the District’s chief executive officer and is responsible, along with other administrative staff, for the District’s day-to-day management under the Board’s direction.

The District’s Director of Technology and Communications (Director) is responsible for managing the District’s IT operations and reports to the Superintendent.

Quick Facts
Student Enrollment455
Employees155
Total Network Accountsa560
Nonstudent Network Accounts171
a These included student, teacher, staff and generic accounts, which are used by network services and applications to run properly.

Audit Period

July 1, 2017 – July 11, 2019


Local Government and School Accountability Contact Information:

Phone: (518) 474-4037; Email: localgov@osc.ny.gov
Address: Office of the State Comptroller, Division of Local Government and School Accountability
110 State Street, 12th Floor; Albany, NY 12236