City Of Scottsdale: Network Security Audit – Audit No. 2106

Press release from the City of Scottsdale:

June 22, 2021

View Report

View Highlights

The City Auditor’s Office contracted with Berry Dunn McNeil & Parker, LLC, (BerryDunn) for a network security audit to evaluate the effectiveness of the City's network controls. The scope of work included an information technology (IT) governance controls review, external vulnerability scanning and penetration testing, and server configuration assessment.

After its review of IT governance, BerryDunn recommended formalizing configuration and security standards and roles and responsibilities between the City’s central IT department and departmental technology groups. The audit also recommended the IT department prioritize the completion and testing of its disaster recovery and business continuity plan and assess department resources allocated to the security function.

While BerryDunn’s technical review found no critical issues at the time of testing, the audit made recommendations to enhance and mature the security of the City’s network and technical assets.

The detailed results of this audit are not included in the public report due to its sensitive nature.

The department agreed with the recommendations and noted that corrective actions are underway. 

This press release was produced by the City of Scottsdale. The views expressed here are the author’s own.