TOWN OF POUGHKEEPSIE – A state comptroller’s audit of the Arlington Central School District’s network found that district officials did not ensure user accounts were adequately configured and secured.
In addition, sensitive information technology control weaknesses were communicated confidentially to officials.
The audit also found that officials should have disabled 150 of the 9,989 network user accounts examined. Those 150 accounts included 116 generic accounts, 27 employee accounts, five contractor accounts, one former employee account and one account the IT director could not identify to whom it belonged.
Those accounts have been unnecessarily active ranging from August 2007 to January 2020, the audit found.
The report said district officials should have developed methods to determine who is using each shared user account at a given time.
The state recommendations included regularly reviewing user accounts and ensuring that unneeded user account ae immediately disabled and restricting the use of shared network user accounts and developing procedures to monitor the use of those accounts.
District officials agreed with the state’s recommendations.
