Audit Objective
Determine whether the Royalton-Hartland Central School District (District) has an information technology (IT) contingency plan that is periodically evaluated, updated as necessary, and disseminated to appropriate District personnel.
Key Findings
The Board and District officials have not developed and adopted a comprehensive written IT contingency plan.
- The District pays $10,500 for central site infrastructure support, which includes a Disaster Recovery Plan (DRP) template, a key component of an IT contingency plan. Although the District paid for a DRP template, officials did not obtain it.
Without a comprehensive written IT contingency plan in place that is properly distributed to all responsible parties and periodically tested for efficacy, District officials have less assurance that employees will react quickly and effectively to maintain business continuity. As a result, important financial and other data could be lost, or suffer a disruption to operations.
Key Recommendation
- Develop and adopt a comprehensive written IT contingency plan and communicate it to appropriate officials and employees.
District officials agreed with our recommendations and indicated they intend to take corrective action.