Purpose of Audit

The purpose of our audit was to review the Town’s information technology (IT) controls for the period January 1, 2015 through December 27, 2016.

Background

The Town of Windsor is located in Broome County and is governed by a five-member Town Board. General fund budgeted appropriations for 2017 total approximately $880,000.

Key Findings

• The Town’s IT policy was adopted in 2007 but has not been updated since then and does not address data backup, disaster recovery, breach notifications or security awareness training.
• The IT policy had not been distributed to Town officials and employees.
• The Town’s server is not located in a secure location.

Key Recommendations

• Annually review and update the Town’s IT policy.
• Provide Town personnel who use computers a copy of the acceptable use policy and retain a signed copy of the acknowledgement page to ensure the users’ understanding of the Town’s policy.
• Secure the Town’s server so that only authorized individuals can gain access.