Purpose of Audit

The purpose of our audit was to review the School’s information technology for the period July 1, 2014 through January 7, 2016.

Background

The Young Women’s College Prep Charter School of Rochester is a public school financed by local, State and federal resources that is not under the control of the local school board. The School, which is governed by a 10-member Board of Trustees and has approximately 290 students, is located in the City of Rochester, Monroe County. The School had operating expenses for the 2014-15 fiscal year of approximately $2.7 million.

Key Findings

• The Board has not adopted policies and procedures for breach notification, access rights, user accounts, password management, back-up procedures, wireless technologies, mobile devices or protection of personal, private and sensitive information (PSSI).
• The School does not have a disaster recovery plan.
• Each user does not have his or her own unique user name for the financial software.

Key Recommendations

• Adopt policies and procedures for breach notification, access rights, user accounts, password management, back-up procedures, wireless technologies, mobile devices or protection of personal, private and sensitive information (PSSI).
• Develop a formal disaster recovery plan.
• Create separate accounts for each user and assign access rights based on job duties.