POUGHKEEPSIE – An audit of the Poughkeepsie City School District’s information technology, has determined the district did not adequately control and secure its personal, private and sensitive information.
The objective of the study was do determine whether district officials ensured IT systems were adequately secured and protected against unauthorized use, access and less.
The audit also said district employees were not provided with IT security awareness training and the district did not have service level agreements with its IT service providers.
Sensitive information technology control weaknesses were also communicated confidentially to school officials.
Among the key recommendations of the audit are the inventory, classification and development of effective controls over personal, private and sensitive information; ensuring all necessary personnel receive up-to-date IT security awareness training; and ensuring that all IT services are provided based on a formal service level agreement.
Superintendent of Schools Dr. Eric Rosser said the Board of Education “agrees with your assessments and will work diligently to rectify the issues listed below.” In a letter to the state comptroller’s office, he said the district has developed a corrective action plan based on the audit’s IT recommendations report.
