Get Full Government Meeting Transcripts, Videos, & Alerts Forever!
Get email alerts on the Internal Audit topic
No spam. Unsubscribe anytime.
Internal audit presents 2025 risk assessment and 2026 plan; EAP audit flags vendor performance and P-card controls
Summary
Internal audit staff presented a 2025 enterprise risk assessment identifying 590 risks and proposed a 2026 risk-based audit plan focused on parking, economic development, the assessor's office and the transportation director's office; the employee assistance program audit found vendor service-level and segregation-of-duties weaknesses in P-card approvals.
Cola, the city's internal-audit lead, presented the results of the 2025 citywide risk assessment and proposed a 2026 audit plan at the March 16 Finance Committee meeting. Cola said the assessment, conducted November 2025'January 2026, identified 590 risks across agencies, most rated low to moderate, and described a risk-based approach for 2026 audit priorities.
Cola highlighted that the 2026 plan will focus on areas with limited recent audit coverage or elevated operational risk, including the parking division (an audit started late 2025 and is now about 85% complete), the economic development division, the assessor's office and the transportation director's office (Cola said metro is not included). He emphasized embedding data analytics and risk sensing in the audit cycle and benchmarking city practices against public-sector standards.
Employee Assistance Program audit: Cola summarized findings from the EAP audit covering January'December 2025, noting vendor performance and service-level issues in the CSIM contract and a need to strengthen segregation of duties in P-card (PC card) approval processes. Director Gonzalez (Arlene) clarified that no improperly processed transactions were found but that the office is small ("all of four people") and will reduce the number of P-cards to improve controls while retaining necessary operations.
Questions and next steps: Alder Figuro Cole pressed about when police, fire and civil-rights offices would be audited; Cola said the three agencies will be included in the next annual assessment and considered for 2027 audit work. The committee thanked internal audit for the presentation; the meeting then adjourned.
