The Board and District officials need to improve their budgeting practices and transparency. Although our 2016 audit identified similar deficiencies, officials did not effectively implement corrective actions. As a result, the Board and District officials continued to not properly manage fund balance and reserves, resulting in more taxes being levied than were needed to fund operations.

The claims auditor did not perform a proper claims audit because she did not ensure claims had adequate supporting documentation for her review prior to approval.

School officials did not ensure that network and financial software access controls were adequate. As a result, data and personal, private and sensitive information (PPSI) are at greater risk for unauthorized access, misuse, or loss. In addition to sensitive information technology (IT) control weaknesses that were confidentially communicated to officials.

The Board and District officials did not effectively manage the District's fund balance. As a result, they were not transparent with taxpayers and the District levied more taxes than needed to fund operations.

The Board did not ensure that goods and services were procured in accordance with the procurement policy and that all claims were approved prior to payment.

District officials did not properly account for leave accruals for 22 of the 49 employees' accrual records that we tested. The District may incur $47,817 in additional payroll costs if the errors are not corrected.

District officials did not maintain appropriate IT asset inventory records or establish adequate IT controls over network user accounts.

District officials did not submit SSBA allocation claims totaling $1.35 million, related to eligible technology purchases made during fiscal years 2019-20, 2020-21 and 2021-22.

A Town official had a prohibited interest in Town contracts.

Although overtime was properly approved, District officials did not monitor overtime to ensure it was accurate. Had officials established adequate controls, the District's overtime costs may have been reduced by at least $167,000. As a result, officials are paying more for overtime than necessary.

District officials did not establish adequate controls over network user accounts. As a result, the District has an increased risk of unauthorized access to and use of its network and potential loss of important data. In addition to finding sensitive information technology (IT) control weaknesses that were confidentially communicated to officials.

The Board and District officials did not ensure goods and services were procured in accordance with applicable statutes and/or District policy and did not ensure claims were properly audited and approved prior to payment.

Two Town officials had prohibited interests in Town contracts.

The Board did not always seek competition when procuring goods and services or ensure all claims were properly audited and approved. When goods and services are not competitively procured, they may not be procured in a cost-effective manner. Also, when claims are not properly audited, the Board's ability to effectively monitor the Town's financial operations is diminished.

District officials did not ensure network user accounts were needed, and they did not adopt an adequate IT contingency plan. In addition to sensitive IT control weaknesses that we communicated confidentially to officials.

Town officials did not adequately safeguard and account for Department assets.

The Company Board did not ensure compliance with contracts or enforce the lease agreement's terms and conditions. As a result, there is an increased risk that funds could be subject to loss, theft or misappropriation.

The Clerk did not record, deposit, remit or report collections in a timely and accurate manner. As a result, the Board's ability to effectively monitor financial operations was diminished. Had the Board conducted the required annual audits, it may have recognized these deficiencies and taken corrective action.

The Board was not properly auditing claims prior to approving them for payment. As a result, the risk is increased that claims could have been paid for inappropriate purposes.

The District did not maximize Medicaid reimbursements by submitting claims for all eligible Medicaid services provided. We reviewed reimbursements for 20 eligible students, or 13 percent of the eligible student population.

While we found online banking transactions were appropriate, District officials did not secure access to online banking. In addition to sensitive information technology (IT) control weaknesses that we confidentially communicated to District officials.

The Board did not ensure that claims were adequately supported, for appropriate Village purposes and audited before payment.

District officials did not establish adequate controls over network user accounts and did not develop a written IT contingency plan. As a result, the District had additional entry points for attackers to access and view personal, private and sensitive information on the network and did not have sufficient documented guidance or plans to follow to resume essential operations if an unexpected IT incident occurred. In addition to finding sensitive IT control weaknesses that were confidentially communicated to officials.

BOCES officials did not always use competitive methods when procuring goods and services. We examined purchases totaling $8.2 million and found purchases totaling $1.2 million were either not competitively procured or not procured as required by the BOCES' Purchasing Regulation.

In 2017, OSC issued an audit report that included findings that the Town's accounting records and reports were incomplete, inaccurate and could not be relied on to make financial decisions. The Supervisor has continued to not maintain the Town's accounting records and reports in a complete, accurate, up-to-date or timely manner. Without reliable accounting records, the Board cannot make sound financial decisions.