Columbus City Schools Office of Internal Audit FY 2015 Work Plan Overview. January 21, 2015

Transcription

1 Columbus City Schools Office of Internal Audit Overview January 21, 2015

2 Development of the Risk Assessment Definition of the Audit Universe: The Audit Universe is made up of auditable units, which consist of business processes throughout Columbus City Schools. Note: The risk assessment for FY 2014 included 24 auditable units and was completed by Schneider Downs, a CPA accounting firm. The Office of Internal Audit staff conducted interviews of various Columbus City Schools staff in FY 2015, those efforts resulted in the identification of an additional 48 auditable units. Therefore, the Columbus City Schools FY 2015 audit universe consists of 72 auditable units. 2

3 Audit Universe IT System Development Life Cycle IT Change Management IT Security Disaster Recovery IT Network and Hardware Internal Capture & Closing and Financial Capture & Investment Management Petty Cash Revenue / Accounts Receivable Board Package Capital Assets GAAP Fixed Asset Inventory / Equipment Tracking Payroll Accounts Payable Leave Time Donations Travel & Conference Expenses Cash Management Student Activities Treasurer s Office Federal / State Grants Budget Development, Monitoring, Amendments, Compliance Position Control Adult Education Communications / External Affairs Legal & Policy Records Request Compliance Records Retention Management Succession Planning Labor Relations / Hearing Process Recruitment Staff Evaluations / Performance Assessment Training Development Compensations / Benefits Hiring Process Termination Process FMLA / Workers Comp Compliance SEMS & Substitute Student Support Curriculum Development / Impact Monitoring School / Faculty Administration Student Activities - Academic Enrollment / Student Counts State Test Administration & Enrollment Planning & Projections Grade Grade Promotion Grade Retention Special Education Student Schedules Home Instruction Transportation Fleet Management Food Purchasing HDC Warehouse / Book Processing / Record Retention Storage & Destruction Surplus Furniture Logistics / Delivery Printing Buildings & Grounds / Maintenance Custodial Capital Improvements / Projects LEDE / Outreach Inclusion Program Safety & Security Real Estate & Shared Facilities Customer Relations Health, Family and Community Nursing WCBE Latchkey Student Attendance Data Integrity Student Admission Data Integrity Student Withdrawal Data Integrity 3

4 Risk Assignment Each audit unit is assigned a level of Risk Impact, Risk Probability, Inherent Risk, Control Risk, and Residual Risk: Risk Impact Rating is the results, effect, or consequences of an event on the District. Risk Probability/Likelihood is the probability that a given event will occur. Inherent risk is the risk before considering any control measures. Control risk is the risk that the District s internal controls are insufficient to reduce the inherent risk to an acceptable level. Residual risk is the risk remaining after consideration of the inherent risk and control risk. 4

5 Risk Criteria Each audit unit was subject to an analysis against criteria of 18 risk factors below which impact risk to the audit unit. Operational/Transactions Financial Capture and Entity Culture Technology Liquidity/Treasury Reputation Interdependence on Other Business Units Student Readiness Safety and Security Management/stakeholder /request Legal/Regulatory Compliance Fraud Organizational strategy External Competitors/Economy/Innovation Human Capital Environmental Vendor/Sub-contractor Prior Year Audit History 5

6 Definition of Risk Score: Office of Internal Audit Risk Score Risk was assigned a score of High, Moderate, or Low, based on the significance of the impact a breakdown of the internal controls or noncompliance could have on the District s objectives and goals. 6

7 2015 Work Plan Auditor of State Recommendation Follow-up 234 Human Resources Follow-up Review 318 Human Resources Background Check Consulting 50 Altered Student Attendance Follow-up Review 788 Payroll 341 Accounts Payable 100 Grants 180 Transportation 128 Cheerleader Advisor Special Review Follow-up 96 Internal Audit Fraud Hotline Monitoring 270 Outsource IT Audit Follow-up 40 Outsource Budgeting 86 Outsource Purchasing 86 Unscheduled Time (Reserved to allow flexibility to respond to unforeseen events) TOTAL AUDIT HOURS 3,

8 2015 Work Plan 8