State audit critical of Hudson Housing Authority’s IT security


ALBANY – The State Comptroller’s Office has conducted an audit of the Hudson Housing Authority’s information technology systems to determine whether they were adequately secured and protected against unauthorized use, access and loss.

Among the key findings were that the authority board did not adopt an acceptable use policy, that officials did not provide IT security awareness training, and that the authority did not have adequate online banking agreements.

The audit’s key recommendations included:

  • Adopt comprehensive IT policies, communicate them to all employees, review and update routinely or when significant changes in the environment occur.
  • Create and maintain serve level agreements for any IT services provides by third-party vendors.
  • Consider requiring employees to sign acknowledgement forms to help ensure they are aware of adopted policies and procedures and understand what is expected of them.

Authority officials agreed with the findings and recommendations and indicated they will take corrective action.