Purpose

To determine the extent of implementation of the four recommendations included in our initial audit report, Controls Over Computers (Report 2010-N-7).

Background

The New York City Department of Environmental Conservation is responsible for the protection of the environmental health, welfare, and natural resources of the City and its residents. The Department manages the City's water supply, 14 in-City wastewater treatment plants, as well as seven treatment plants upstate. The Department also implements Federal Clean Water Act rules and regulations, handles hazardous material emergencies and toxic site remediation, and oversees asbestos monitoring and removal. As the agency responsible for the City's environment, the Department also regulates air quality and hazardous waste. As of June 30, 2013, the Department had 5,571 full-time employees in 20 separate bureaus.

Our initial audit report, issued on January 10, 2012, found that the Department did not place enough priority on ensuring that computer assets were properly controlled and appropriately used. We concluded that these weak management practices increased the risk that equipment may be misappropriated, or used for personal use outside of the Department, without detection. We made four recommendations to the Department designed to strengthen these controls.

Key Finding

Department officials have made some progress in addressing the issues identified in our initial report. However, additional improvements are still needed. Of the four prior recommendations, one has been implemented, two have been partially implemented, and one has not been implemented.

Key Recommendation

Officials are given 30 days after the issuance of the follow-up review to provide information on any actions that are planned to address the unresolved issues discussed in this review.