City University of New York

General Controls at the Data Center and Selected Colleges

Certain data processing operations at the City University of New York (CUNY) are performed centrally, while other such operations are performed by the individual colleges comprising CUNY. We examined the controls that have been established to protect the security, integrity and ongoing availability of these computer operations. We identified a number of actions that needed to be taken to improve these controls, and presented our detailed findings to CUNY officials. To protect the security of CUNY’s computer operations, our detailed findings are not included in our public report.

For a complete copy of Report 2003-S-10 click here.
For a copy of the 90-day response click here.
For a copy of the associated follow-up report click here.