The objective of this review was to assess compliance with the City’s Acceptable Use Policy with respect to employee Internet usage pertaining to personal use, visits to inappropriate sites and excessive use of resources.
Our review indicated that controls appear adequate in restricting access to inappropriate Internet sites and activities using excessive computing resources. However, there are inadequate controls in monitoring excessive personal use at the individual level.
Our review found that approximately 200 users or two per cent of all users appear to have spent excessive time on the Internet for personal use and not in compliance with the Acceptable Use Policy. Management needs to implement system changes and proactive measures to monitor compliance with the Acceptable Use Policy.