Get Full Government Meeting Transcripts, Videos, & Alerts Forever!
Get email alerts on the Nprb Revenue Collections topic
No spam. Unsubscribe anytime.
Park Board audit finds seven weaknesses in revenue collections, finance director says policy will change on written card data
Summary
A recent assurance audit found one high- and six moderate-rated issues at the Minneapolis Park and Recreation Board, including staff writing down credit-card data when terminals fail; NPRB finance leadership agreed to policy and training changes and the committee directed the report to be published.
An assurance audit of the Minneapolis Park and Recreation Boards revenue collections identified seven issues and recommended strengthened policies, procedures, training and oversight, the audit presenter told the citys Audit Committee on Dec. 8.
Presenter Mr. Pudial said the review, covering transactions from Jan. 1, 2022 through June 30, 2025, examined revenue from recreation centers, golf courses, ice arenas, concessions and other collection points. The audit found one high-risk and six moderate-risk observations and recommended specific remediation steps for each.
The highest-profile item concerned handling customer payment information. The audit team reported that some staff wrote down credit-card information when terminals failed and that audit reviewers found outdated references to PCI DSS standards. The audit recommended that NPRB update policies, procedures and training, strictly prohibit retaining card data on paper and ensure terminal inspections and staff training are performed and tracked.
Julie Weisman, NPRB finance director, confirmed the practice and said the current policy "does state that you can write it down and shred it." She said management will remove that allowance from policy and move to electronic alternatives when terminals are unavailable.
Other findings included gaps in cash-handling policies and site-specific procedures, insufficient periodic oversight and monitoring of collection points, weaknesses in reconciliation between shifts and safe access controls, lack of systematic training for revenue-collection processes, limited inspection of concessionaire accounting records, and uneven emergency-safety planning and deposit-transport procedures at some sites.
Pudial said NPRB management has agreed to the recommendations and drafted action plans; the audit team said it is confident the action plans will remediate the issues. Committee members asked how site-specific procedures will be created; NPRB staff said they will categorize sites (recreation centers, golf courses, etc.) and develop roughly 10 template site procedures, and that four have already been completed.
Chair Payne directed the clerk to receive, file and publish the NPRB revenue-collections audit report. The committees discussion focused on remediation timelines, the need to update training and the immediate policy change to prohibit written retention of credit-card data.
