TBO.com - TBO is Tampa Bay Online

Hernando Today

Technology Security Concerns Cited In School District Audit

ADVERTISEMENT

By TONY MARRERO Hernando Today

The Tampa Tribune

Published: November 12, 2008

BROOKSVILLE - The Hernando County School District's information technology network needs beefier security protocols.

The computer privileges of fired workers must be revoked in a timelier manner.

And the district must create a more detailed log of cell phone use.

These are among the findings of the state's annual operational audit of the Hernando County School District for the 2007-08 fiscal year that ended in June.

The Florida Auditor General's office completed the review and outlined 10 areas of concern that need improvement.

The district has already addressed some of the issues and is working to fix the others, Superintendent Wayne Alexander said in a letter to the auditor general's office responding to the findings.

Some information technology staffers have too much access and control to district software applications, auditors wrote. Computer help desk workers also had unnecessary power to update information on behalf of users who call for assistance.

A review of 10 terminated staffers found that network access privileges weren't revoked until as many as 78 days after the worker was fired, according to the audit.

"Prompt action is necessary to ensure that a former employee does not retain information technology access privileges that would allow misappropriation or abuse of District assets," auditors wrote, adding that district staffers assured them that protocols were put in place back in August.

The district also needs to have a procedure in place to provide the Internal Revenue Service with the value of cell phone services provided to each employee.

The district had 228 cell phones last fiscal year that added up to a bill of more than $115,000. While staffers checked to make sure the phones were only being used for business, the district also needs to provide documentation to the IRS, typically in the form of notated cell phone bills, auditors wrote.

The district failed to file a report to the state, required by law, that lists all the commercial entities that requested employee Social Security numbers during the past year and the reasons why the requests were made. The district said it provided employee numbers to insurance companies, for background checks and for citizenship verification, but did not create the report.

District offices were closed Tuesday and officials could not be reached for comment.

In the letter to the auditor general's office, Alexander wrote that the district has taken steps to correct the deficiencies such as increasing security protocols, filing the proper reports with the state and making sure cell phone records are sent to the IRS.

"In my efforts to improve our system of operations, I will continue to implement your recommendations whenever possible," he wrote.

Reporter Tony Marrero can be reached at 352-544-5286 or lmarrero@hernandotoday.com.

Share this:

Loading Comments...

Email Print

ADVERTISEMENT