Get Full Government Meeting Transcripts, Videos, & Alerts Forever!
Get email alerts on the Audit Remediation topic
No spam. Unsubscribe anytime.
Steuben County adopts corrective action plans after NYS Comptroller audits of IT and financial management
Summary
The Legislature adopted corrective-action plans responding to two NYS Comptroller audits: an IT safeguarding audit that includes implementing Varonis and multiple IT controls, and a financial management audit that updates fund-balance policy and codifies multiyear financial plans.
The Steuben County Legislature on March 23 adopted corrective action plans responding to two NYS Comptroller audits: Audit Report #2025M-96 (safeguarding computerized data) and Audit Report #2025M-127 (financial management).
For IT safeguarding (Audit #2025M-96), the County’s plan lists specific actions and dates: purchase and implement Varonis for automated data-discovery and classification with an implementation target of June 2026; develop SLAs and third-party security policies (Oct. 2026); implement annual SOC report reviews (May 2026); revise the IT contingency and backup procedures and begin quarterly full-server backup testing (formally by July–Aug. 2026); require periodic IT security awareness training starting May 2026; and implement formal SOPs for account provisioning and disabling. The Director of Information Technology, Robert F. Wolverton, is listed as responsible for implementation of the IT actions.
For the financial-management audit (Audit #2025M-127), the corrective actions include updating the Fund Balance policy (completed May 2025, including a maximum limit), codifying multiyear financial and capital plans into the Administrative Code (April 2026 target), reviewing reserve funds and interest allocation methodology (remediation steps begun in FY2025 with further remediation in FY2026), and tighter budget assumptions for future years. The County Manager, Jack K. Wheeler, and Commissioner of Finance were assigned responsibility for several items. Both corrective-action plans were adopted by roll-call vote and will be submitted to the NYS Comptroller as final audit responses.
