MidHudson News is reporting an audit by the New York State Comptroller's Office has determined village of Red Hook officials did not sufficiently secure and protect its information technology systems against unauthorized use, access and loss. The audit found the village board failed to adopt required or adequate IT policies, provide users with IT security awareness training, or develop a disaster recovery plan. The report also noted that officials did not know village employees were accessing websites for nonbusiness purposes because they did not routinely monitor employee internet use. It also found the village did not define the IT consultant’s responsibilities and did not have a formal contract with the consultant. Plus, sensitive IT control weaknesses were communicated confidentially to officials. The state recommended the village develop and adopt comprehensive IT policies and more, plus negotiate a formal contract with the consultant. Village officials generally agreed with the state findings and recommendations and indicated they have initiated corrective action. Read more at MidHudsonNews [dot] com.