Purpose of Audit

The purpose of our audit was to examine the controls over information technology (IT) for the period July 1, 2010, to December 18, 2012.

Background

The Urban Choice Charter School is located in the City of Rochester and is governed by the Board of Trustees, which comprises 10 members.

Key Findings

The Board has not established adequate internal controls over the School’s IT system to ensure the School’s computerized data and assets are safeguarded from internal and external threats.

• The Board has not established policies and procedures related to remote access, data backup, computer security, and data breach.
• The Board has not adopted a disaster recovery plan to address potential disasters.

Key Recommendations

• Adopt comprehensive policies and procedures related to remote access, data backup, computer security, and data breach.
• Adopt a comprehensive disaster recovery plan.