ALBANY – A state audit of the Town of New Windsor’s information technology operations found that the town did not provide employees with cybersecurity training.
The study by the State Comptroller’s Office also found that the town did not have a disaster recovery plan and did not ensure online banking agreements complied with state law.
Sensitive information technology control weaknesses were communicated confidentially to town officials.
Recommendations included that the town provides employees with periodic IT security awareness training, develops a written disaster recovery plan and that it ensures only banking agreements comply with state general municipal law.
In response, Town Supervisor George Meyers disputed the state’s assessment stating the town does conduct cyber-security training, that it does have a disaster recovery plan, and that it does have proper controls regarding banking.