Town of Wolcott – Information Technology (2020M-126) | Office of the New York State Comptroller

Issued Date

June 11, 2021

Audit Objective

Determine whether the Town Board (Board) ensured the Town of Wolcott’s (Town) information technology (IT) assets were adequately safeguarded.

Key Findings

The Board did not ensure that IT assets were adequately safeguarded. The Board did not:

Adopt any IT policies or a disaster recovery plan.
Provide users with cybersecurity awareness training.
Ensure the financial software, Town Clerk’s software and Justice Court software had the necessary controls to maintain data integrity.

Sensitive IT control weaknesses were communicated confidentially to officials.

Key Recommendations

Adopt IT policies and a disaster recovery plan.
Provide cybersecurity awareness training.
Consider upgrading department software or implement compensating controls for software deficiencies.

Town officials generally agreed with our recommendations and indicated they plan to initiate corrective action.

Background

The Town is located in Wayne County and includes the Villages of Wolcott and Red Creek.

The Town is governed by an elected Board composed of the Supervisor and four Board members. The Board is responsible for the general management of Town operations.

The Supervisor is the chief executive officer and is responsible for the Town’s day-to-day activities, including managing IT assets. The Town relies on the Supervisor’s clerk for the overall management of its IT infrastructure and engages a vendor for IT support and services as needed.

Quick Facts
Town Hall
Computers	7
Officials and Employees	22

Audit Period

January 1, 2016 – November 19, 2019