Skip to Content

Login   Subscribe   Site Index   Contact Us   Google Translate™

NYS Comptroller

THOMAS P. DiNAPOLI

Audits of Local Governments and School Districts

Report Highlights

Village of Arkport - Information Technology (2019M-203)

Released: January 17, 2020 -- [read complete report - pdf]

Audit Objective

Determine whether Village officials adequately safeguarded Village information technology (IT) assets.

Key Findings

The Board did not:

  • Develop adequate IT policies and procedures.
  • Enter into a written agreement with the IT vendor for services provided to the Village.
  • Provide IT security awareness training to employees.

In addition, sensitive IT control weaknesses were communicated confidentially to Village officials.

Key Recommendations

The Board should:

  • Adopt comprehensive IT security policies, periodically review and update all IT policies and procedures to reflect changes in technology and the Village’s computing environment, and stipulate who is responsible for monitoring all IT policies.
  • Enter into a professional service contract with the IT vendor that sufficiently defines the role and responsibilities of each party, includes all services to be provided, and addresses confidentiality and protection of personal, private and sensitive information (PPSI).
  • Provide periodic IT security awareness training to personnel who use IT resources, including the importance of maintaining physical security and protecting PPSI.

District officials generally agreed with our findings and indicated they plan to initiate corrective action.

Background

The Village of Arkport (Village) is located in the Town of Hornellsville in Steuben County. The Village is governed by a Board of Trustees (Board), which is composed of an elected Mayor and four elected Trustees.

Village officials and employees use IT to initiate, process, record and report financial transactions, Internet access and email. The Treasurer uses Internet access for authorizing online banking transactions and submitting required reports.

The Village works with an IT vendor to perform all IT services for the Village, such as setting up new computers and troubleshooting computer issues. The Village has an internal network that allows individuals to share and access electronic data and computer resources. The IT vendor also manages the Village’s network security and the data it contains.

Quick Facts
Desktop Computers3
Number of Employees11
2019-20 Total Village Appropriations$698,821

Audit Period

June 1, 2018 – October 1, 2019


Local Government and School Accountability Contact Information:

Phone: (518) 474-4037; Email: localgov@osc.ny.gov
Address: Office of the State Comptroller, Division of Local Government and School Accountability
110 State Street, 12th Floor; Albany, NY 12236