New York auditors found unneeded active building-access badges at several school systems and identified financial-control and cybersecurity weaknesses in local governments and fire organizations across the state.
The findings are part of a group of municipal and school audits released Tuesday by state Comptroller Thomas DiNapoli.
Schools retained unneeded access accounts
Auditors said the Broadalbin-Perth, East Rochester, Green Island, Niskayuna and Union-Endicott school districts and the Onondaga-Cortland-Madison BOCES did not properly manage building access. Brentwood Union Free School District could also improve its controls.
Each had active but unnecessary accounts with assigned badges among the records reviewed, creating a potential risk of unauthorized entry.
Fire organizations face accounting findings
The Moravia Volunteer Fire Company in Cayuga County did not properly account for receipts and spending, leaving its board without reliable financial information, auditors said.
The Fort Johnson Volunteer Fire Company lacked adequate board oversight, comprehensive financial policies, claims review and required records. The Ischua Fire District had not filed annual financial reports with the comptroller for more than 15 years and did not properly audit claims before payment.
Auditors found no recommendations were needed after reviewing 47 claims totaling $145,549 at the Hopkinton Fire District, aside from minor discrepancies discussed with officials.
Cybersecurity and utility billing reviewed
Audits found cybersecurity weaknesses in the town of Wilton and villages of Cassadaga and Lacona. The findings included inadequate account safeguards, missing asset inventories, absent written policies, limited employee training and no contingency plan.
In Medina, auditors found $296,867 in water and sewer collections was deposited on time and intact, but billing accuracy, delinquent-account management, procedures and oversight needed improvement.





