Purpose of Audit

The purpose of our audit was to assess the District’s IT for the period July 1, 2014 through February 26, 2016.

Background

The Avon Central School District is located in the Towns of Avon, Caledonia, Lima and York in Livingston County and the Town of Rush in Monroe County. The District, which operates three schools with approximately 1,000 students, is governed by an elected five-member Board of Education. Budgeted general fund appropriations for the 2015-16 fiscal year totaled approximately $19.2 million.

Key Findings

• The Board did not adopt policies for password management; protection of personal, private and sensitive information (PPSI); wireless technology; remote access; mobile devices; sanitation and disposal of electronic media; user accounts; access rights; data backups; and breach notification.
• The Board did not adopt a disaster recovery plan.

Key Recommendations

• Adopt policies and procedures for password management, protection of PPSI, wireless technology, remote access, mobile devices, sanitation and disposal of electronic media, user accounts, access rights, data backups and breach notification.
• Develop a formal disaster recovery plan to maintain or restore critical operations as quickly as possible in the event of a disaster. This plan should be distributed to all responsible parties, periodically tested and updated as needed.