Search
Orleans County – Sheriff’s Department Inmate and Commissary Accounts (2017M-209)
… Purpose of Audit The purpose of our audit was to examine the Department’s processes and procedures over …
https://www.osc.ny.gov/local-government/audits/county/2018/02/02/orleans-county-sheriffs-department-inmate-and-commissary-accounts-2017m-209City of Geneva – Financial Management (2015M-105)
… Key Findings The City Manager did not use historical trends or prior year amounts when producing budgets for … estimates of revenues and expenditures based on historical trends and future projections. Continue to reduce reliance on …
https://www.osc.ny.gov/local-government/audits/city/2015/08/28/city-geneva-financial-management-2015m-105Morristown Central School District – Information Technology (2021M-137)
… disruptions. Officials did not: Develop written procedures for granting, changing and revoking user access to the … officials. Key Recommendations Develop written procedures for network user access. Evaluate and periodically review all … Develop a comprehensive written IT contingency plan for the District. District officials generally agreed with …
https://www.osc.ny.gov/local-government/audits/school-district/2021/12/03/morristown-central-school-district-information-technology-2021m-137Wayne Central School District – Transportation Department Operations (2021M-160)
… the overall efficiency and cost-effectiveness of the transportation department’s operations. Key Findings District … the overall efficiency and cost-effectiveness of the transportation department’s operations. The Board of … did not adopt comprehensive written policies for the transportation department’s operations. District officials …
https://www.osc.ny.gov/local-government/audits/school-district/2022/01/14/wayne-central-school-district-transportation-department-operations-2021mArkport Central School District – Network Access Controls (2021M-162)
… Central School District (District) officials ensured network access controls were secure. Key Findings District officials did not ensure that the District’s network access controls were secure. District officials did … accounts and permissions. The District had 92 unneeded network user accounts and nine user accounts with unnecessary …
https://www.osc.ny.gov/local-government/audits/school-district/2022/01/28/arkport-central-school-district-network-access-controls-2021m-162Valley Central School District – Information Technology (2020M-154)
… Determine whether the Board of Education (Board) and Valley Central School District (District) officials ensured … Determine whether the Board of Education Board and Valley Central School District District officials ensured the …
https://www.osc.ny.gov/local-government/audits/school-district/2021/06/18/valley-central-school-district-information-technology-2020m-154Whitesville Central School District – Information Technology (2021M-22)
… School District (District) officials adequately secured access to the network and information systems. Key Findings District officials did not adequately secure access to the network and information systems. District … School District District officials adequately secured access to the network and information systems …
https://www.osc.ny.gov/local-government/audits/school-district/2021/06/18/whitesville-central-school-district-information-technology-2021m-22Marlboro Central School District – Information Technology (2021M-33)
… officials. Key Recommendations Develop written procedures for managing system access. Restrict the use of shared …
https://www.osc.ny.gov/local-government/audits/school-district/2021/07/23/marlboro-central-school-district-information-technology-2021m-33Penn Yan Central School District – Network Access Controls (2021M-79)
… to address the District’s specific needs and expectations for IT services. District officials agreed with our …
https://www.osc.ny.gov/local-government/audits/school-district/2021/09/03/penn-yan-central-school-district-network-access-controls-2021m-79Haldane Central School District – Information Technology (2021M-84)
… former employee accounts. Create secondary user accounts, for three network user accounts with administrative permissions, to be used for non-administrative activities. Sensitive IT control … permissions and create secondary accounts to be used for non-administrative activities. District officials agreed …
https://www.osc.ny.gov/local-government/audits/school-district/2021/11/05/haldane-central-school-district-information-technology-2021m-84Nanuet Union Free School District – Network User Accounts and Information Technology Contingency Plan (2022M-135)
… services. Key Recommendations Develop written procedures for managing network user account access. Develop and adopt a …
https://www.osc.ny.gov/local-government/audits/school-district/2022/12/09/nanuet-union-free-school-district-network-user-accounts-and-informationCarle Place Union Free School District – Network User Account Controls (2022M-121)
… (District) officials established adequate controls over network user accounts. Key Findings District officials did not establish adequate controls over network user accounts. As a result, the District has an increased risk of unauthorized access to and use of its network and potential loss of important data. In addition to …
https://www.osc.ny.gov/local-government/audits/school-district/2022/12/16/carle-place-union-free-school-district-network-user-account-controlsPort Chester-Rye Union Free School District – Information Technology User Accounts (2021M-209)
… Recommendations Maintain and periodically evaluate a list of authorized network user accounts and notify the IT vendor … using service requests to disable network user accounts of former employees and other users that are no longer …
https://www.osc.ny.gov/local-government/audits/school-district/2022/06/17/port-chester-rye-union-free-school-district-information-technology-userGreenville Fire District – Investment Program (2023M-106)
… and money market accounts, which had average available funds for investing of $845,365. Had officials considered … safety, liquidity and yield - when investing available funds. District officials generally agreed with our …
https://www.osc.ny.gov/local-government/audits/fire-district/2023/12/29/greenville-fire-district-investment-program-2023m-106Raquette Lake Union Free School District - Business Office Operations (2023M-151)
… and the third-party provider. Implement controls to safeguard the Treasurer’s signature on disbursement checks … appropriately assign roles and responsibilities. Safeguard the Treasurer’s signature and monitor online …
https://www.osc.ny.gov/local-government/audits/school-district/2024/04/12/raquette-lake-union-free-school-district-business-office-operations-2023mHalf Hollow Hills Central School District – Information Technology Equipment Inventory Records (2024M-33)
… if lost, stolen or misused. We selected 100 pieces of IT equipment (devices) costing $88,223 to confirm their … were properly inventoried and determined that 23 percent of the equipment was not properly accounted for. …
https://www.osc.ny.gov/local-government/audits/school-district/2024/06/21/half-hollow-hills-central-school-district-information-technologyTown of Sempronius – Real Property Tax Exemptions Administration (2023M-66)
… applicants provided documentation required to grant an exemption or maintain the documentation. Of the 278 property … needed to verify eligibility and the Assessor’s exemption calculation. Because each exemption impacts the tax roll, a miscalculated or …
https://www.osc.ny.gov/local-government/audits/town/2023/08/18/town-sempronius-real-property-tax-exemptions-administration-2023m-66Town of Southold – Sexual Harassment Prevention Training (S9-23-10)
… officials completed annual sexual harassment prevention training (SHP Training). Key Findings SHP Training was not provided to all … of the 423 total Town employees and elected officials, 10 Justice Court employees, 38 Police Department employees and …
https://www.osc.ny.gov/local-government/audits/town/2023/09/08/town-southold-sexual-harassment-prevention-training-s9-23-10Cayuga County Soil and Water Conservation District – Information Technology Governance (2020M-118)
… with the IT vendor. Establish adequate safeguards for online banking transactions. Implement strong access and … application controls. Provide IT security awareness training for employees who use District IT assets. In … a SLA with the IT vendor. Provide IT security awareness training to personnel who use IT assets. District officials …
https://www.osc.ny.gov/local-government/audits/county/2020/11/25/cayuga-county-soil-and-water-conservation-district-information-technologyOneida-Herkimer-Madison Board of Cooperative Services (BOCES) – Information Technology (2020M-99)
… Services (BOCES) officials ensured: Security awareness training was provided, Information technology (IT) assets … did not regularly provide formalized IT security awareness training, assess computer usage to confirm IT assets were … Key Recommendations Provide periodic IT security awareness training. Monitor employee Internet use. Develop stronger IT …
https://www.osc.ny.gov/local-government/audits/boces/2020/12/18/oneida-herkimer-madison-board-cooperative-services-boces-information-technology