Audit committee reviews state fraud-risk assessment, flags internal-audit questions

The North Ogden City audit committee discussed the Utah State Auditorfraud risk assessment and its implications for local internal controls. Financial Director Peter Brown presented the assessment and walked the committee through the scoring, noting a few areas where additional precision or documentation could increase the city—7s score. "This was presented in last month at the the city council meeting," Peter Brown said, describing the timing and the intent to meet the state's expectations.

Committee members pressed staff on whether the city has a licensed or certified finance expert on the management team and whether an internal audit function exists. One committee member asked, "Does the city have a licensed or certified expert as part of its management team? A CPA, CGFM, CMA..." Brown and others noted that staff are in transition and that Casey is "starting as CPFO" while other staff continue CPA studies. The committee agreed to ask the state auditor—7s office for the formal definition of "management team" and to revisit whether the city needs a documented internal-audit schedule or a mitigated internal-control process tailored to the size of the organization.

The discussion also focused on practical mitigations for small departments where the same person can initiate procurement, receive goods, and approve invoices; staff described work to separate the ordering, receiving and invoice-approval functions in small teams. The committee asked staff to return with clearer documentation and specific mitigations in the next audit cycle. The committee did not adopt a formal new policy at the meeting; the topic will be revisited as part of the audit schedule.