Get Full Government Meeting Transcripts, Videos, & Alerts Forever!
Independent audit firm finds 631 governmental risks; council weighs shift to risk-based audit program
Summary
Consultants from Malden & Jenkins told Columbus city council an initial enterprise risk assessment identified 631 specific risks and 92 auditable entities, urging the city's internal audit function to shift from investigations toward a risk-based approach and annual plan; council members asked for more transparency, dashboards and staff alignment.
An independent risk assessment presented to Columbus’ city council on Oct. 14 concluded the city government faces hundreds of discrete operational, financial and legal risks and recommended a shift in internal audit focus from reactive investigations to annual, risk-based auditing.
Craig Carter, managing director of Malden & Jenkins, presented the firm’s initial enterprise risk assessment, which catalogued 631 specific risks across nine categories and grouped the city’s audit universe into 92 auditable entities. He told council the firm used 15 management interviews and documentation review to define the risk library and identify six “critical” and 32 “high” risk departments.
“This was the first risk assessment done for the government,” Carter told council. He described the deliverable as a “tool” — a risk taxonomy and library the city’s internal audit…
Already have an account? Log in
Subscribe to keep reading
Unlock the rest of this article — and every article on Citizen Portal.
- Unlimited articles
- AI-powered breakdowns of topics, speakers, decisions, and budgets
- Instant alerts when your location has a new meeting
- Follow topics and more locations
- 1,000 AI Insights / month, plus AI Chat

