Skip to Content

Login   Subscribe   Site Index   Contact Us   Google Translate™

NYS Comptroller

THOMAS P. DiNAPOLI

Audits of Local Governments and School Districts

Report Highlights

Town of Haverstraw - Information Technology (2019M-125)

Released: December 13, 2019 -- [read complete report - pdf]

Audit Objective

Determine whether Town officials ensured the Town’s Information Technology (IT) systems were adequately secured and protected against unauthorized use, access and loss.

Key Findings

  • Employees accessed nonbusiness websites although it is prohibited by Town policy.
  • Officials did not adopt a data classification, breach notification or online banking policy or a written disaster recovery plan.
  • Employees were not provided with IT security awareness training.

In addition to this public report, sensitive IT control weaknesses were communicated confidentially to Town officials.

Key Recommendations

  • Design, implement and enforce procedures to monitor the use of the Town’s IT resources, including personal use.
  • Adopt written IT policies and procedures to address data classification, breach notification, online banking and disaster recovery.
  • Provide IT security awareness training to personnel who use IT resources.

Background

The Town of Haverstraw (Town) is located in Rockland County. The Town is governed by an elected Town Board (Board) composed of the Town Supervisor (Supervisor) and four Board members. The Board is responsible for the general oversight of Town operations and finances, including security over the Town’s IT system.

The Town Supervisor (Supervisor) serves as the chief executive officer and is responsible for day-to-day operations.

The Town contracted with a third-party IT consultant to operate and maintain the Town’s IT system. The Supervisor was responsible for overseeing the IT consultant.

Quick Facts
Servers3
Desktop and Laptop Computers38
Employees213
2019 General Fund Appropriations$33 million

Audit Period

January 1, 2018 – January 22, 2019. We extended our scope period to February 28, 2019 for IT information collection.


Local Government and School Accountability Contact Information:

Phone: (518) 474-4037; Email: localgov@osc.ny.gov
Address: Office of the State Comptroller, Division of Local Government and School Accountability
110 State Street, 12th Floor; Albany, NY 12236