Purpose of Audit

The purpose of our audit was to assess the District’s management of network user accounts and security settings for the period July 1, 2014 through February 29, 2016.

Background

The Fabius-Pompey Central School District is located in the Towns of Cazenovia, Cuyler, Fabius, LaFayette and Pompey, in Onondaga County. The District, which operates two schools with approximately 750 students, is governed by an elected seven-member Board of Education. Budgeted appropriations for the 2014-15 fiscal year totaled approximately $17.3 million.

Key Findings

• Of 927 user accounts, 111 had not been used to log on to the District’s computer system in at least six months, and 18 of the 111 were last used in 2013 or earlier.
• The District has not configured a banner message to display at logon that warns users about potential consequences of unauthorized access.

Key Recommendations

• Review network user accounts, disable or remove any deemed unnecessary and establish procedures to ensure accounts no longer needed are disabled or removed in a timely manner.
• Configure all District computers and servers to display a banner when users attempt to log on.