Skip to Content

Login   Subscribe   Site Index   Contact Us   Google Translate™

NYS Comptroller

THOMAS P. DiNAPOLI

Audits of Local Governments and School Districts

Report Highlights

Town of Pelham - Information Technology (2019M-77)

Released: August 9, 2019 -- [read complete report - pdf]

Audit Objective

Determine whether the Town Board ensured the Town’s IT systems were adequately secured and protected against unauthorized use, access and loss.

Key Findings

  • Personal Internet use was found on computers assigned to 10 employees who routinely accessed personal, private and sensitive information.
  • Town officials did not provide IT security awareness training for individuals who used Town IT assets.
  • Town Board and officials did not develop comprehensive IT policies or procedures.

Sensitive information technology (IT) control weaknesses were communicated confidentially to officials.

Key Recommendations

  • Provide adequate oversight of employee Internet use to ensure it complies with Board policies.
  • Provide employees with annual IT security awareness training.
  • Adopt comprehensive IT policies that address acceptable use, IT security awareness training, breach notification and disaster recovery planning and communicate all IT policies to officials, employees and the IT consultant.

District officials generally agreed with our recommendations and have initiated or indicated they planned to initiate corrective action.

Background

The Town of Pelham (Town) is located in Westchester County. The Town is governed by an elected Town Board (Board) that includes a Supervisor and a four-member Town Council.

The Board is responsible for providing oversight of the Town’s operations. The Supervisor is the Town’s chief financial officer and chief executive officer and is responsible, along with other administrative staff, for the Town’s day-to-day administration.

The Town contracted with an IT consultant who reviewed and updated the Town’s computer systems to ensure system and hardware versions were current. He also performed problem solving on an on-call basis.

Quick Facts
Number of Employees103
IT Users15
Network Accounts15
Number of Computers15

Audit Period

January 1, 2017 – November 13, 2018. We extended our scope forward to December 20, 2018 to complete computer testing.


Local Government and School Accountability Contact Information:

Phone: (518) 474-4037; Email: localgov@osc.ny.gov
Address: Office of the State Comptroller, Division of Local Government and School Accountability
110 State Street, 12th Floor; Albany, NY 12236