Purpose of Audit

The purpose of our audit was to evaluate the District’s internal controls over Information Technology for the period July 1, 2014 through January 14, 2016.

Background

The Greenville Central School District is located in the Town of Greenville in Greene County. The District, which operates two schools with approximately 1,200 students, is governed by an elected seven-member Board of Education. Budgeted appropriations for the 2015-16 fiscal year totaled approximately $28.7 million.

Key Findings

• The District has not updated its acceptable use policy since September 2001.
• The Board has not adopted a breach notification policy.
• The District’s disaster recovery plan was not kept up to date, properly distributed or tested on a regular basis.
• The District’s web filter permitted categories that did not appear to be for educational purposes.

Key Recommendations

• Update the District’s acceptable use policy to include the use of personal devices on the District’s network and acceptable use of District assets when used outside the District’s network.
• Develop a policy for breach notification.
• Ensure that the disaster recovery policy is periodically updated.
• Adjust the web content filtering to ensure that staff and students are in compliance with the District’s acceptable use policy.