[read complete report – pdf] | [read complete 2023 report – pdf]

Purpose of Review

The purpose of our review was to assess Uniondale Union Free School District’s (District) progress, as of October 2025, in implementing our recommendations in the audit report Uniondale Union Free School District – Information Technology, 2023M-61, released in October 2023.

The audit determined District officials did not adequately manage non-student network user accounts and permissions. As a result, the District had an increased risk of unauthorized access to and use of the network and could potentially lose important data. In addition to sensitive information technology (IT) control weaknesses that were confidentially communicated to officials, we found that the Technology Supervisor did not: 

• Establish written procedures for granting, changing and disabling non-student network user account access, and regularly review the accounts to ensure they are necessary 
• Disable 3,471, or 71 percent, of the District’s enabled non-student network user accounts that were not needed, including: 
  • 1,824 individual user accounts, 515 of which were last used to log in to the network in 2003, 
  • 1,647 shared and service user accounts, and 
  • 12 network user accounts that had administrative permissions.

The audit included five recommendations to help officials improve the District’s information technology.

Background

The District is located in the Town of Hempstead in Nassau County. The Board of Education (Board) is composed of five elected members and is responsible for the general management and control of the District’s financial and educational affairs. The Superintendent of Schools is the chief executive officer and is responsible, along with other administrative staff, for the District’s day-to-day management under the Board’s direction. The Technology Supervisor is responsible for the oversight of the IT department with five staff members, including the system engineer, and ensuring non-student network user accounts are managed adequately.

Results of Review

Based on our limited procedures, of the five recommendations contained in the 2023 report, we determined, that the District’s Director of Technology and Library Media Services (Technology Director), Technology Supervisor and officials partially implemented three recommendations and did not implement two recommendations.