Purpose of Audit

The purpose of our audit was to determine if the Board established policies and procedures to adequately safeguard electronic data and computer resources for the period June 1, 2015 through December 31, 2016.

Background

The Village of Fayetteville is located in the Town of Manlius in Onondaga County and has a population of approximately 4,400. The Village is governed by an elected five-member Board of Trustees. General fund budgeted appropriations for 2016-17 totaled approximately $5.9 million.

Key Findings

• The Board did not adopt information technology policies and procedures for individual access rights, disaster recovery and password security management.
• Eight former Village Fire Department personnel had active user accounts and access to the Department network.
• Village officials did not provide IT security awareness training to personnel who use IT resources.

Key Recommendations

• Adopt policies and procedures to address user access rights, disaster recovery and password security management.
• Ensure that users who have left Village employment have their access rights removed.
• Provide IT security awareness training.