Selected reports issued by the New York State Comptroller September 13, 2016
Source: Office of the State Comptroller
[Internet links highlighted in color]
City Universityof New York – Control over integrated resources and services tool
CUNYfirst replaced CUNY’s legacy computer systems as an integrated and flexible state-of-the-art program. Auditors, however, concluded that CUNY’s processes and controls did not adequately restrict CUNYfirst users’ access to ensure that individuals only had appropriate roles assigned. For example, a student had access to a business application that students normally cannot access. Multiple individuals also appeared to have roles for which they had no business purpose. For example, 22 employees outside of financial aid could apply for student loans for individuals other than themselves. Also, a student employee had unauthorized grade change capability. For the period January through May 2015, this student employee changed grades 127 times for other students. http://osc.state.ny.us/audits/allaudits/093016/15s34.pdf
State Education Department – ARC of Ulster-Green compliance with the reimbursable cost manual
For the year ended Dec. 31, 2014, The ARC of Ulster Greene generally complied with state guidelines for reimbursement. Auditors identified $995 in other-than-personal-service costs charged to the programs that did not comply with SED’s requirements for reimbursement. http://osc.state.ny.us/audits/allaudits/093016/15s60.pdf
Energy Research and Development Authority – NY-Sun Incentive Program
NYSERDA’s oversight of NY-Sun is adequate; however, auditors identified two areas where additional controls are necessary. NYSERDA established 210 days as the expected time required for installers to complete most projects, and an extension request is required if the project exceeds this timeframe. However, 1,568 projects not only have exceeded 210 days, but have been open for more than 300 days, and do not have an extension request. Auditors found NYSERDA had not completed the required inspections of the initial three jobs for some new installers, nor has it documented the reasons for the deviation. http://osc.state.ny.us/audits/allaudits/093016/15s91.pdf
State Universityof New York – Compliance with the Jeanne Clery Act [20 USC §1092(f)]
An initial audit report issued in August 2014 found that certain SUNY colleges published inaccurate crime statistics on their Annual Security Reports or to the Department of Education which could affect the public's ability to accurately assess college safety and security and make valid comparisons among colleges. In a follow-up report, auditors found SUNY officials have made some progress in correcting the problems identified in the initial report. However, improvements are still needed. http://osc.state.ny.us/audits/allaudits/093016/16f4.pdf
Office of General Services – Hourly based information technology services
Auditors found OGS does not have an effective process to ensure a candidate consultant’s qualifications meet the mandatory qualifications specified by the agencies using the Hourly Based Information Technology Services (HBITS) contract, so OGS could not ensure it paid the correct hourly bill rates. In particular, OGS does not ensure the HBITS vendors fulfill their contractual obligation to verify that a candidate has the mandatory qualifications specified by the agencies, nor do OGS staff verify the mandatory qualifications. http://osc.state.ny.us/audits/allaudits/bseaudits/bse20160902.pdf
Westchester County Health Care Corp. – Supplemental payments to executive employees
From 2013 through 2015, WCHCC paid 18 executives (with base salaries totaling about $21.6 million) almost $4.6 million in supplemental payments. The largest supplemental payments (totaling about $2.7 million) were made to the chief executive and the chief financial officer and accounted for almost 59 percent of the total paid. WCHCC officials stated that senior management had goals and were evaluated on achieving those goals before receiving their payments. During the audit period, senior managers often did not submit goals and achievements statements. Further, WCHCC officials could not provide written performance evaluations for any senior managers. Auditors identified other payments that may require further examination by WCHCC officials which, among other things, included sign-on and retention bonuses. Auditors also found that not all of the supplemental payments were reported to the Authorities Budget Office. http://osc.state.ny.us/audits/allaudits/093016/15s77.pdf