Trending
CASSADAGA -- According to the Office of the State Comptroller, the Village of Cassadaga's previous administration "did not provide adequate governance to safeguard IT assets from cybersecurity threats."
The audit period spans from June 1, 2024 to Oct. 1, 2025. During that time, the Village utilized six external service providers to perform various IT services, including printer support, hardware maintenance and repair, security services and other IT support services.
State Comptroller Thomas DiNapoli's Office stated that the Village Board and officials "did not establish and maintain a comprehensive IT asset inventory." As a result, assets were not adequately tracked. Various internal control weaknesses, including policy and oversight, increased the risk that assets and data could be lost, damaged or compromised. Sensitive IT control weaknesses were communicated confidentially to Village officials.
"Without effective cybersecurity governance, including Board-adopted and enforced policies and IT contingency plan, and cybersecurity awareness training, the Village is at an increased risk of a successful cyberattack," DiNapoli's Office stated.
The Comptroller's report includes eight recommendations that could improve the Village's cybersecurity governance and IT asset safeguards. Village officials agreed with the Comptroller's findings and indicated a Corrective Action Plan will be presented to DiNapoli's office within 90 days, pursuant to Section 35 of the New York State General Municipal Law.
The audit was conducted pursuant to Article V, Section 1 of the State Constitution and the Office of the New York State Comptroller's authority as set forth in Article 3 of the New York State General Municipal Law.
The Village had eight full-time and 11 part-time employees, along with three Village computers, as of Oct. 2025. The audit was conducted during the Village's previous administration, with Clerk Annette McChesney and Deputy Clerk Roxanne Astry serving the Village alongside Mayor Bill Dorman and Deputy Mayor Bill Astry. The Village now has new faces in each of the four positions, as well as a new Department of Public Works Supervisor.
"The Board agrees with the findings in the completed audit and recognizes the
importance of cyber security in protecting Village assets and the residents we are sworn to represent," Mayor Rudy Abersold said in response to the Comptroller's findings.
Abersold and Village Clerk Sue Penhollow met with two representatives from the audit team on July 22 to review the report and discuss necessary improvements.
Since the new administration took over, the Board has already taken efforts to remedy the issues, including removing and destroying the 2017 printer located in the DPW building, strengthening log-ins and passwords, and hiring an accounting firm for financial services and obtaining the firm's cyber security policy for Village records. The Village will further its efforts by reviewing and updating its policies and attending training sessions.
"We appreciate the professionalism and courtesy shown by the two representatives from the State Comptroller's Office. Their assistance is valuable to Village's working through this process," Abersold stated.