NYS Comptroller finds Hudson Housing Authority IT security lacking
Jul 20, 2020 2:15 pm
MidHudsonNews [dot] com is reporting the State Comptroller’s Office has conducted an audit of the Hudson Housing Authority’s information technology systems to determine whether they were adequately secured and protected against unauthorized use, access and loss. Auditors found the HHA board failed to adopt an acceptable use policy, officials did not provide IT security awareness training and the authority did not have adequate online banking agreements. The report further indicated that "[s]ensitive information technology control weaknesses were communicated confidentially to officials." The Comptroller's Office recommended the Hudson Housing Authority adopt comprehensive IT policies, communicate those policies to employees, review and update those policies routinely or when significant changes in the environment occur. The Comptroller's Office also recommended the authority create and maintain service level agreements for any IT services provided by third-party vendors and consider requiring employees to sign acknowledgement forms to help ensure they are aware of adopted policies and procedures. In a June 25 letter to Chief Examiner Lisa Reynolds, HHA Executive Director Timothy Mattice acknowledged that the findings and recommendations had been received and that the housing authority would institute the state's recommendation on or before Dec. 31. Read the full story at MidHudsonNews [dot] com.