[read complete report – pdf] | [read complete 2023 report – pdf]

Purpose of Review

The purpose of our review was to assess the Hilton Central School District’s (District’s) progress, as of August 2025, in implementing our recommendations in the audit report Hilton Central School District – Network Access Controls (2022M-200), released in June 2023.

The audit determined that District officials did not ensure network access controls were adequately managed. It also determined there were sensitive information technology (IT) control weaknesses, which we communicated confidentially to officials. As a result, data and personal, private and sensitive information (PPSI) are at greater risk for unauthorized access, misuse or loss. The audit included three recommendations to help District officials ensure network access controls are adequate.

Background

The District serves the Towns of Clarkson, Greece, Hamlin and Parma in Monroe County.  The District is governed by a seven-member Board of Education, that is responsible for managing and controlling the District’s financial and educational affairs. The Superintendent of Schools is the District’s chief executive officer and is responsible for District administration.

Results of Review

• Of the three recommendations contained in the public audit report, we determined that the Board of Education, District officials and the Director of Technology partially implemented all three recommendations. As a result, the District’s network continued to have increased risk for unauthorized access, misuse or data loss.
• We also reviewed progress in implementing the recommendations related to the sensitive IT control weaknesses that we reported to officials confidentially, and communicated those results confidentially to District officials.