Internal Audit Department

Similar documents
I n f o r m a t i o n S y s t e m s C y b e r s e c u r i t y A s s e s s m e n t

Integrated Assurance Embracing The Three Lines of Defense

Association of Public Treasurers of the United States and Canada. Certified Public Finance Administrator (CPFA) New Applicant Information

CFE Exam Review Course

STATE OF NORTH CAROLINA OFFICE OF THE STATE AUDITOR BETH A. WOOD, CPA FAYETTEVILLE STATE UNIVERSITY

Government Finance Officers Association. CPFO Certified Public Finance Officer

BOARD OF COUNTY COMMISSIONERS

UNIVERSITY OF NORTH CAROLINA CHAPEL HILL

UNIVERSITY OF NORTH CAROLINA CHARLOTTE

ATTACHMENT SAF/FM POLICY ON REIMBURSEMENT OF EXPENSES TO OBTAIN/ MAINTAIN PROFESSIONAL CREDENTIALS (REVISED Apr 2015)

CASA External Peer Review Program Guidelines. Table of Contents

KENYA SCHOOL OF GOVERNMENT EMPLOYMENT OPORTUNITY (EXTERNAL ADVERTISEMENT)

Assessment and Compliance with Sarbanes-Oxley (SOX) Requirements DataGuardZ Whitepaper

FOLLOW-UP REPORT Industrial Control Systems Audit

Opportunities to Integrate Technology Into the Classroom. Presented by:

IS Audit and Assurance Guideline 2001 Audit Charter

NERC Staff Organization Chart Budget 2019

We would like to announce to you a number of upcoming changes to the Certified Internal Auditor Exam:

Request for Qualifications for Audit Services March 25, 2015

NERC Staff Organization Chart Budget 2019

NERC Staff Organization Chart Budget 2018

Application for Certification

COUNTY AUDIT HILLSBOROUGH COUNTY, FLORIDA CONSULTANT COMPETITIVE NEGOTIATION ACT (CCNA) PROCUREMENT PROCESS AUDIT REPORT # 251

The Texas A&M University System Internal Audit Department MONTHLY AUDIT REPORT

DoD Financial Management Certification Program

WHICH SOC REPORT IS RIGHT FOR YOUR CLIENT?

STATE OF NORTH CAROLINA

SUBJECT: Training Policy-04 Defense Finance and Accounting Service Civilian Certifications, and Related Expenses

Kennesaw Scholarship. Please note: to AFP Atlanta with. Name: Work Address: Employer: Your Title: Work Fax Number: this position?

(The ERB) 2012 NASBA Regional Meetings

Texas A&M University: Learning Management System General & Application Controls Review

comprehensive guide toı ACCOUNTINGı CERTIFICATIONSı cpa, cfe, cia, cisa & more ı The Bean Counter, LLC All Rights Reservedı

PUBLIC UTILITIES COMMISSION:

Administrative Directive No. 4: 2011 Continuing Professional Education Requirements for All Certification Programs

Oregon Board of Accountancy

IS Audit and Assurance Guideline 2002 Organisational Independence

INTERNAL CONTROL, CORPORATE GOVERNANCE AND RISK MANAGEMENT

Certified Assessor. Application for COBIT Certified Assessor

Three Year Follow up Request to Grand Jury Updated March 2, 2018

NERC Staff Organization Chart Budget 2017

Transitioning from SAS 70 to SSAE 16

Table of Contents. Preface xvii PART ONE: FOUNDATIONS OF MODERN INTERNAL AUDITING

Judiciary Judicial Information Systems

NERC Staff Organization Chart Budget 2017

Internal Quality Assurance Report. Inspector General Department

Internal Quality Assurance Report. Inspector General Department

Department Of Public Utilities Multi Vendor Reading System (MVRS) 12 Months ended December 31, 2011

General Information Technology Controls Follow-up Review

CPA Exam and Licensure Information and FAQs

LEVEL I - BRONZE STANDARD

Policy. Business Resilience MB2010.P.119

Investigation. City of Edmonton Office of the City Auditor. ETS Workforce Development. January 14, 2019

THE UNIVERSITY OF TEXAS-PAN AMERICAN OFFICE OF AUDITS & CONSULTING SERVICES. Computer Administrative Rights Report No

26 February Office of the Secretary Public Company Accounting Oversight Board 1666 K Street, NW Washington, DC

3/13/2015. COSO Revised: Implications for Compliance and Ethics Programs. Session Agenda. The COSO Framework

Within our recommendations for editorial changes, additions are noted in bold underline and deletions in strike-through.

Auditing Profession Amendment Bill [B ]

CONTROLS OVER ELECTRONIC DOCUMENT MANAGEMENT. Report No. D April 16, Office of the Inspector General Department of Defense

HKIB Continuing Professional Development (CPD) Scheme

Oregon Board of Accountancy WHAT YOU NEED TO KNOW

Institute of Certified Forensic Accountants. Certificate in Internal Auditing

RISK BASED INTERNAL AUDIT (16 CPE) COSO ERM Framework - Risk Assessment Process

SALARY $ $72.54 Hourly $3, $5, Biweekly $8, $12, Monthly $103, $150, Annually

Educational and Professional qualifications

INCREASE YOUR CHANCES OF PASSING THE CIA EXAM

Professional Certifications

CENTRAL TAKE THE STAGE REGIONAL CONFERENCE MAY 1 4, 2016 / NASHVILLE, TN

Office of the City Auditor 2014 Third Quarter Activity Report November 25, 2014

Privacy hacking & Data Theft

ISACA Survey Results. 27 April Ms. Nancy M. Morris, Secretary Securities and Exchange Commission 100 F Street NE Washington, DC

Understanding and Evaluating Service Organization Controls (SOC) Reports

The Texas A&M University System Internal Audit Department MONTHLY AUDIT REPORT

Office of MN.IT Services Data Centers

SOC 3 for Security and Availability

Spread your wings Professional qualifications and development at Deloitte. What impact will you make? careers.deloitte.com

CMA Certification. What it Can Mean for You

IT Audit Process. Prof. Mike Romeu. January 30, IT Audit Process. Prof. Mike Romeu

Finance & Audit Committee Update Office of Internal Auditing June 11, 2013

DoD Financial Management Certification Program. Ms. Glenda Scheiner

2018 Government Professional Accounting Seminar

Audit and Compliance Committee - Agenda

The Forensic Certified Public Accountant Programme

The Institute of Internal Auditors San Gabriel Valley Chapter

OF ACCOUNTANTS IAASB CAG MEETING MARCH 7, 2011

Number of CPE Hours Required for CCSA, CFSA, CGAP, CRMA. Specialty Certification CPE Requirements. Required Attestations at Time of CPE Reporting

Service Organization Control (SOC) Reports: What they are and what to do with them MARCH 21, 2017

Auditor General's Office

Certified Treasury Professional, Certified Treasury Professional with Mastery of Canadian Treasury Management and Certified Cash Manager

TOWING VESSEL INSPECTION BUREAU (TVIB)

Report of the Nominating Committee

The Minimum IT Controls to Assess in a Financial Audit (Part II)

University System of Maryland Frostburg State University

Maryland Health Care Commission

of decisions, on which they receive immediate feedback. The module should typically take around 6 hours to complete.

COBIT 5 With COSO 2013

AUDIT & ADMINISTRATION COMMITTEE MEETING HELD IN ROOM #318 OF THE COUNTY OFFICE BUILDING CARMEL, NEW YORK 10512

Cybersecurity Guidance for Small Firms Thursday, November 8 9:00 a.m. 10:00 a.m.

To the management of Entrust Datacard Limited (formerly known as Entrust Limited, hereinafter Entrust ) and Trend Micro, Inc.

Department of Public Safety and Correctional Services Information Technology and Communications Division

Postal Inspection Service Mail Covers Program

Transcription:

O C B o a r d o f S u p e r v i s o r s 1 st District - Janet Nguyen 2 nd District - John M.W. Moorlach, Vice Chairman 3 rd District - Bill Campbell Chairman 4 th District Shawn Nelson 5 th District - Patricia C. Bates Internal Audit Department O R A N G E C O U N T Y 6 t h L a r g e s t C o u n t y i n t h e U S A FINAL CLOSE-OUT FIRST FOLLOW-UP AUDIT INTERNAL CONTROL AUDIT: OC DANA POINT HARBOR BOAT SLIP WAITLIST ADMINISTRATION ORIGINAL AUDIT NO. 1031 AS OF JUNE 15, 2011 Our First Follow-Up Audit found that OC Dana Point Harbor fully implemented the two (2) recommendations from our original audit report dated November 29, 2010. During the original audit, OC Dana Point Harbor and its three operators Dana Point Marina Company (East Marina), Dana West Marina (West Marina), and Vintage Marina Partners (Embarcadero Marina) maintained a total of 29 waitlists containing 3,378 applicants for 2,915 boat slips. AUDIT NO: 1033-D REPORT DATE: JUNE 29, 2011 Director: Dr. Peter Hughes, Ph.D., CPA Deputy Director: Eli Littner, CPA, CIA Senior Audit Manager: Michael Goodwin, CPA, CIA Senior Internal Auditor: Abdul Khan, CPA, CIA RISK BASED AUDITING GAO & IIA Peer Review Compliant 2001, 2004, 2007, 2010 American Institute of Certified Public Accountants Award to Dr. Peter Hughes as 2010 Outstanding CPA of the Year for Local Government 2009 Association of Certified Fraud Examiners Hubbard Award to Dr. Peter Hughes for the Most Outstanding Article of the Year Ethics Pays 2008 Association of Local Government Auditors Bronze Website Award 2005 Institute of Internal Auditors Award to IAD for Recognition of Commitment to Professional Excellence, Quality, and Outreach

Independence Objectivity Integrity GAO & IIA Peer Review Compliant - 2001, 2004, 2007, 2010 Providing Facts and Perspectives Countywide RISK BASED AUDITING Dr. Peter Hughes Director Ph.D., MBA, CPA, CCEP, CITP, CIA, CFE, CFF Certified Compliance & Ethics Professional (CCEP) Certified Information Technology Professional (CITP) Certified Internal Auditor (CIA) E-mail: Certified Fraud Examiner (CFE) Certified in Financial Forensics (CFF) peter.hughes@iad.ocgov.com Eli Littner Deputy Director Michael Goodwin Senior Audit Manager Alan Marcum Senior Audit Manager Autumn McKinney Senior Audit Manager CPA, CIA, CFE, CFS, CISA Certified Fraud Specialist (CFS) Certified Information Systems Auditor (CISA) CPA, CIA MBA, CPA, CIA, CFE CPA, CIA, CISA, CGFM Certified Government Financial Manager (CGFM) Hall of Finance & Records 12 Civic Center Plaza, Room 232 Santa Ana, CA 92701 Phone: (714) 834-5475 Fax: (714) 834-2880 To access and view audit reports or obtain additional information about the OC Internal Audit Department, visit our website: www.ocgov.com/audit OC Fraud Hotline (714) 834-3608

Letter from Dr. Peter Hughes, CPA Transmittal Letter Audit No. 1033-D June 29, 2011 TO: FROM: Brad Gross, Director OC Dana Point Harbor Dr. Peter Hughes, CPA, Director Internal Audit Department SUBJECT: First and Final Close-Out Follow-Up Audit of Internal Control Audit: OC Dana Point Harbor Boat Slip Waitlist Administration, Original Audit No. 1031, Issued November 29, 2010 We have completed a First Follow-Up Audit of internal controls over OC Dana Point Harbor Boat Slip Waitlist Administration. Our audit was limited to reviewing, as of June 15, 2011, actions taken to implement the two (2) recommendations from our original audit. We conducted this First Follow- Up Audit in accordance with the FY 10-11 Audit Plan and Risk Assessment approved by the Audit Oversight Committee and Board of Supervisors (BOS). The results of our First Follow-Up Audit are discussed in the OC Internal Auditor s Report following this transmittal letter. Because our First Follow-Up Audit found that OC Dana Point Harbor implemented the two recommendations, this report represents the final close-out of the original audit. Each month I submit an Audit Status Report to the BOS where I detail any critical and significant control weaknesses released in reports during the prior month and the implementation status of audit recommendations as disclosed by our Follow-Up Audits. Accordingly, the results of this audit will be included in a future status report to the BOS. Other recipients of this report are listed on the OC Internal Auditor s Report on page 2. i The Internal Audit Department is an independent audit function reporting directly to the Orange County Board of Supervisors.

Table of Contents OC Dana Point Harbor Boat Slip Waitlist Administration Audit No. 1033-D As of June 15, 2011 Transmittal Letter i OC Internal Auditor s Report 1

OC Internal Auditor s Report Audit No. 1033-D June 29, 2011 TO: FROM: SUBJECT: Brad Gross, Director OC Dana Point Harbor Dr. Peter Hughes, CPA, Director Internal Audit Department OC Dana Point Harbor Boat Slip Waitlist Administration, Original Audit No. 1031, Issued November 29, 2010 Scope of Review We completed a First Follow-Up Audit of our Internal Control Audit of OC Dana Point Harbor Boat Slip Waitlist Administration. Our audit was limited to reviewing actions taken as of June 15, 2011 to implement the two (2) recommendations in our original audit report. Background The original audit reviewed internal controls over OC Dana Point Harbor Boat Slip Waitlist Administration, which included an evaluation of internal controls for: Establishment and administration of boat slip waitlists to ensure boat slips and dry boat storage spaces are assigned properly, orderly, and fairly from the waitlists based on established procedures and the applicant s placement on the waitlists. Determination if boat slip waitlist administration is efficient and effective (no significant backlogs, duplication of work, or manual processes that could be automated), and if processes and controls are consistent between East Marina, West Marina and Embarcadero Marina. There are a total of 29 waitlists for vessels of various sizes for East Marina, West Marina and Embarcadero Marina. During the audit period, there were 3,378 applicants on the waitlists. Between July 1, 2009 and June 30, 2010, there were 403 boat slips and dry boat storage spaces assigned. The original audit identified two (2) Control Findings. Results Our First Follow-Up Audit indicated OC Dana Point Harbor fully implemented the two (2) recommendations. As such, this represents the final close-out of the original audit. Based on the Follow-Up Audit we conducted, the following is the implementation status of the two (2) original recommendations. 1. West Marina: Website Waitlists Not Current (Control Finding) OC Dana Point Harbor work with West Marina to ensure the website waitlists are updated on a regular basis to reflect the current status of the waitlists. Current Status: Implemented. Computer system problems that had prevented the updating of the website waitlists were resolved and the online-accessible waitlists were updated. Regular updating is now performed on an ongoing basis. We reviewed website waitlists on West Marina s website and compared them to offline waitlists to determine if the website waitlists are updated on a regular basis and reflect the current status of the waitlists. No exceptions were noted. Therefore, we consider this recommendation to be implemented. OC Dana Point Harbor Boat Slip Waitlist Administration Page 1 Audit No. 1033-D

OC Internal Auditor s Report 2. West Marina and Embarcadero Marina: Review of Customer Files (Control Finding) OC Dana Point Harbor work with West Marina and Embarcadero Marina to ensure they perform a review of customer files similar to the reviews performed in the East Marina. Current Status: Implemented. Reviews of customer files at West Basin Marina and at Embarcadero Marina are being performed; however, these reviews were not documented in the customer file by the supervisors. Based on inquiry, the supervisors at West Basin Marina and Embarcadero Marina were not clear about having to document their review. Based on discussion with the auditor, the supervisors agreed to redesign New Renter Check Sheet and New Tenant documents at West Basin Marina and Embarcadero Marina respectively, to include signatures lines to show the documented review. All reviews will be documented on a go-forward basis. Therefore, we consider this recommendation to be implemented. We appreciate the assistance extended by OC Dana Point Harbor during our Follow-Up Audit. If you have any questions, please contact me directly or Eli Littner, Deputy Director at 834-5899, or Michael Goodwin, Senior Audit Manager at 834-6066. Distribution Pursuant to Audit Oversight Committee Procedure No. 1: Members, Board of Supervisors Members, Audit Oversight Committee Thomas G. Mauk, County Executive Officer Alisa Drakodaidis, Deputy CEO, OC Infrastructure Lisa Smith, Deputy Director, OC Dana Point Harbor Paul Lawrence, Manager of Operations, OC Dana Point Harbor Foreperson, Grand Jury Darlene J. Bloom, Clerk of the Board of Supervisors OC Dana Point Harbor Boat Slip Waitlist Administration Page 2 Audit No. 1033-D