New York State Comptroller Thomas P. DiNapoli today announced the following local government audits have been issued.

Citizens Hose Company – Board Oversight of Financial Operations (Ontario County)

Auditors determined Citizens Hose Company did not have adequate controls in place to ensure that company funds were safeguarded. The company’s bylaws were insufficient because they did not provide detailed guidance for the treasurer or audit committee when collecting and depositing funds, recording cash receipts and disbursements, and paying company bills. In addition, the treasurer misappropriated more than $20,000 of company funds. The company secretary also inappropriately used a company credit card for personal purchases of at least $1,100 without detection by officials. As a result of the audit, the former Citizens Hose Fire Company treasurer pleaded guilty to felony grand larceny and was ordered to repay restitution.

City of Gloversville – City Clerk (Fulton County)

Auditors found the former clerk did not properly account for fees. The former clerk waived fees for 249 certified copies of birth certificates totaling $2,490 without a valid reason. The former clerk also did not deposit all fees intact and substituted checks and money orders for cash collections. Auditors did determine that the current clerk was acting properly and accounting for fees as of Oct.1, 2017.

Ethics Oversight (Statewide Unit)

This multi-unit audit included 20 individual audits including: eight Counties: Albany, Chautauqua, Chemung, Genesee, St. Lawrence, Steuben, Suffolk and Tompkins; eight Towns: Clay, Colonie, Greece, Oyster Bay, Ramapo, Southampton, Tonawanda and Union; and four Cities: New Rochelle, Rochester, Troy and Utica.

Local governments must comply with New York State General Municipal Law (GML) and should do more to ensure proper ethics oversight.

Oneida-Herkimer-Madison Board of Cooperative Services (Oneida County, Herkimer County and Madison County)

Oneida-Herkimer-Madison Board of Cooperative Educational Services (BOCES) officials did not regularly provide formalized information technology (IT) security awareness training. BOCES officials also did not assess computer usage to confirm IT assets were used for appropriate purposes or establish adequate controls to safeguard information contained in the network and financial system. Personal internet use was found on computers. In addition, network and application user accounts were not properly managed. Auditors also determined no disaster recovery plan was developed. Sensitive IT control weaknesses were communicated confidentially to BOCES officials.

Village of Monticello – Financial Condition (Sullivan County)

The board did not adequately manage the village’s financial condition. As a result, the village is fiscally stressed. Auditors determined the village’s total fund balance will likely be fully depleted at the end of the 2019-20 fiscal year. The village also has exhausted nearly 100 percent of its constitutional tax limit. In addition, the village has significant infrastructure needs that it lacks the funds to address.

Village of Monticello – Records and Reports (Sullivan County)

Auditors determined the treasurer did not maintain accurate, complete and timely accounting records or properly reconcile bank accounts in a timely manner. About $5 million of real property tax revenue was not posted to the accounting records. Bank reconciliations were generally performed two to three months after the statement date. In addition, periodic financial reports were not prepared for the board of trustees or department heads. Annual Update Documents, which are required annual financial reports, constitutional tax limit forms and adopted budgets were not filed in a timely manner, with some filed typically over 200 days late.

Find out how your government money is spent at Open Book New York. Track municipal spending, the state's 180,000 contracts, billions in state payments and public authority data. Visit the Reading Room for contract FOIL requests, bid protest decisions and commonly requested data.