Get Full Government Meeting Transcripts, Videos, & Alerts Forever!
Get email alerts on the Internal Audit topic
No spam. Unsubscribe anytime.
Plante Moran flags user-access and documentation gaps in internal audits; committee hears remediation steps
Summary
Plante Moran presented internal audits on human resources, employee relations and business intelligence, finding issues with system access reviews (Munis, Frontline), incomplete interview and investigation documentation, and data-request tracking; recommendations include semiannual access reviews, supervisory case reviews, and improved ticketing/workflow.
Brianna Wallace of Plante Moran presented the results of three internal audits covering human resources, employee relations and business intelligence.
On human resources, auditors found two Munis users retained permissions after role changes and noted that no regular user-access review of HR permissions was performed during the audit period. They recommended designating an HR individual to oversee role changes and implementing semiannual user-access reviews in Munis.
In employee relations, auditors identified instances where investigation documentation was not retained in the approved portal and found some investigations extended beyond suggested timelines. Recommendations included supervisory review before case closure, establishing milestone timelines for case milestones and improving documentation retention and acknowledgment practices.
For business intelligence, auditors found an absence of a consistent process to monitor and follow up on stale data-delivery requests and that lead-developer assignments were not consistently documented due to a system bug. Recommendations included improving the in-progress dashboard to flag stale requests, periodic validation of lead-developer assignments, and better communication with requesters about revised timelines.
Committee members asked whether automation (and ServiceNow) could help; IT/finance staff said ServiceNow is rolling out in portions of IT and finance, but business intelligence will maintain its custom platform while fixing the identified assignment bug. The district acknowledged opportunities to automate more access-control reviews and will pursue improvements.
