Two years after an audit highlighted significant concerns, North Salem Central School District leaves sensitive student data at risk - DataBreaches.Net

"The audit determined that District officials did not ensure network user accounts were adequately managed. It also determined there were sensitive information technology (IT) control weaknesses, which we communicated confidentially to officials. As a result, compromised accounts may not be detected and increased opportunities for users to make unauthorized or improper changes, improperly access students' private and personal information and/or modify accounting records to conceal malicious transactions exist. The audit included three recommendations to help District officials adequately secure access to the network and properly manage user permissions."

"Of the three audit recommendations, District officials, the IT Director and IT staff implemented one recommendation and partially implemented two recommendations. Our recommendations related to sensitive IT control weaknesses were communicated confidentially to District officials."

Progress as of May 2025 in implementing audit recommendations issued in June 2023 was assessed for the North Salem Central School District. District officials did not ensure network user accounts were adequately managed, and sensitive IT control weaknesses existed. Compromised accounts may not be detected, increasing opportunities for unauthorized or improper changes, improper access to students' private information, and modification of accounting records to conceal malicious transactions. The District serves towns in Westchester and Putnam Counties and is governed by a seven-member elected Board of Education; the Superintendent manages daily operations. Of three audit recommendations, one was implemented and two were partially implemented as of May 2025. Sensitive IT control recommendations were communicated confidentially to District officials.

Read at DataBreaches.Net