ELLENVILLE – The State Comptroller’s Office has determined that officials of the Ellenville Central School District did not ensure network user accounts were adequately managed.
The audit found 550 network user accounts that were no longer needed. Of that number, 462 were not used to log into the district’s IT system in at least six months from the date of the auditor’s review.
The state officials also said the district did not have written procedures for granting, changing or disabling network user accounts.
The audit recommended that the district develop written procedures for granting, changing and disabling user access and maintain a list of authorized user accounts and routinely evaluate and disable any unnecessary user accounts.
District officials agreed with the state recommendations and indicated they would take corrective action.
Auditors also communicated sensitive information technology control weaknesses confidentially.
