Purpose of Audit

The purpose of our audit was to review Information Technology (IT) security for the period July 1, 2014 through March 4, 2016.

Background

The Victor Central School District is located in the Town of Perinton in Monroe County, the Towns of East Bloomfield, Farmington, and Victor in Ontario County and the Town of Macedon in Wayne County. The District, which operates five buildings on one campus with approximately 4,360 students, is governed by an elected seven-member Board of Education. Budgeted appropriations for IT for the 2015-16 fiscal year totaled approximately $1 million.

Key Findings

• The Board and District officials have not implemented appropriate IT policies and procedures related to personal, private and sensitive information (PPSI) classification or data backups.
• The Board has not adopted a sufficient, comprehensive disaster recovery plan.

Key Recommendations

• Adopt policies and procedures to address the classification of PPSI and to address data backups.
• Adopt, distribute and periodically test and update a comprehensive disaster recovery plan that identifies how essential data will be preserved during a disaster and identifies alternate work locations.