Significant Audit & Risk Assessment

Presented by Sandra Healy, CGFMPrincipal Auditor

Idaho Transportation Department

Audit of Idaho Transportation Dept’s Division of Motor Vehicles - 2009Vehicle Services Section & Financial UnitFraud discovered at a county DMV officeData analysis

2

County Headline

3

DMV & CountiesDMV works closely with countiesMOA’s with Assessors & Sheriffs OfficesRisks & Internal ControlsData analysis of all countiesVisits to 23 assessors offices/44 counties

4

Visits to CountiesGoal:

Gather best practicesOffer suggestions to improve internal controls

Wide range of cash handling proceduresCounties welcomed internal control ideasAda County Internal Auditor

5

Assessors’ ConferencePresented on cash handling internal controlsShared concerns about safeguarding cashBest practices to be distributed to counties

6

Results of DMV AuditFinancial unit became the Internal Control,

Fraud Prevention and Finance unitIncreased emphasis on internal controls,

fraud detection & preventionCentralized DMV mail handling to secure

receipts and distribute work to unitsProvided ‘Items for Consideration’ in

development of new data base system

7

Individual Audit Risk Assessment

Risk assessment for internal auditsImprove Internal Control awareness and

educationSurvey of employees on their unit’s internal

controls

8

Pilot Training Program

Developed Internal Control training for front line employees

9

Objectives

InteractionIncrease awarenessIncrease understandingConfidence to speak upConfidence to suggest improvementsSurvey

10

BrainstormingWhat are Internal Controls?What is the purpose of Internal Controls?What is ethical behavior?

11

Understanding Internal ControlsYou may or may not realize that you are

affected by internal controls throughout your daily lives.

12

COSO MODEL

13

Control EnvironmentFoundation of internal controls

Baseball exampleIntegrity and ethical valuesCommitment to competency (staff)Management’s philosophy & operating styleManaging changeCommunication

14

Control Environment

15

Your Section

DMV

ITD

Accountability

Tra

nsp

are

ncy

Efficiency

Cu

stom

er

Serv

ice

Risk AssessmentKnow your goals & objectivesIdentify potential risks to the achievement of

goals & objectives. Risks are the opposite of goals & objectivesRisks are what are addressed by internal

controls

16

Control ActivitiesPolicies, procedures and other safeguards to

ensure objectives are accomplished

17

Information & CommunicationInformation must be identified, captured and

communicatedCommunication must go up, down and across

an organization and must be timelyCommunication enables people to carry out

their responsibilities

18

MonitoringEvaluation and feedback processes (self

evaluations, performance evaluations, peer reviews, audits, reports)

Monitor organizations performance over timeMonitoring should be a regular activity

Part of culture

19

Internal Control SurveySend employees link to survey in SharePointPositive statements on internal controlsStatements grouped by 5 componentsStrongly agree to strongly disagreeComment section for ‘disagree’ and ‘strongly

disagree’ responsesCalculated weighted average for each

componentCompiled commentsSurveys were anonymous

20

Results

21

Survey ResultsSignificant # of commentsUsed in audit planning for Motor Carrier

Services UnitShared with DMV management and HRHeld meetings with employees to discuss

resultsRequested feedback on the training & survey

22

In SummaryDMV is inherently a high risk areaInternal Control training at staff level

beneficialEmployees felt a part of the processSurvey provided insight into the unit’s

environmentAudit planning feedbackSurvey designed for use

in any section

23

Thank You

24

Contact InformationSandra Healy, CGFM Principal AuditorIdaho Transportation DepartmentOffice of Internal ReviewPO Box 7129Boise, ID 83707-1129sandra.healy@itd.idaho.gov

25