Skip to Content

Login   Subscribe   Site Index   Contact Us   Google Translate™

NYS Comptroller

THOMAS P. DiNAPOLI

Audits of Local Governments and School Districts

Rye Neck Union Free School District – Information Technology (2016M-280)


Released: November 10, 2016 -- [read complete report - pdf]

Purpose of Audit

The objective of our audit was to determine whether the District adequately safeguarded sensitive data stored on District computer systems for the period July 1, 2014 through March 31, 2016.

Background

The Rye Neck Union Free School District is located in the Town of Mamaroneck in Westchester County. The District, which operates four schools with approximately 1,550 students, is governed by an elected six-member Board of Education. Budgeted appropriations for the 2015-16 fiscal year totaled approximately $39.6 million.

Key Findings

  • The District does not have adequate policies and procedures for personal, private and sensitive information (PPSI) data classification.
  • The Board has not developed adequate policy and procedures to ensure that District employees receive proper cyber security training to protect District assets.

Key Recommendations

  • Inventory and classify by security level all PPSI maintained on District computer systems.
  • Ensure that employees receive formal IT security training on an ongoing basis that reflects current risks identified by the IT community.

Local Government and School Accountability Contact Information:

Phone: (518) 474-4037; Email: localgov@osc.state.ny.us
Address: Office of the State Comptroller, Division of Local Government and School Accountability
110 State Street, 12th Floor; Albany, NY 12236