Purpose of Audit

The purpose of our audit was to determine if computerized data and assets were properly safeguarded for the period January 1, 2011, to September 5, 2012.

Background

The City of Norwich is located in Chenango County and has 7,190 residents. The City is governed by a six-member Common Council. The City Director of Finance oversees the City’s information technology. The City’s 2012 budget for the general fund was approximately $7.6 million.

Key Findings

• The City’s servers are not placed in secure locations.
• System users were granted administrative privileges that they did not need to perform their job duties.
• The Council has not adopted a disaster recovery plan.

Key Recommendations

• Move the City’s servers so that only authorized staff members can gain access.
• Limit the assignment of administrative privileges to only those users who require such access to perform their job duties.
• Adopt a disaster recovery plan and its elements.