[00:00:05]
>> CHAIR ROGERS COMPTON: A MOTION TO ADJOURN.
>> NOTICE OF MEETING ON THE AGENDA IN THE OFFICE OF THE CHANCELLOR FOR TEXAS GOVERNMENT CODE 5515182.
THIS MEETING IS BEING BROADCAST OVER THE INTERNET BY CODE 551520.
A LOT OF YOU TO INTRODUCE I GUESS TODAY.
[1. Certification of Notice Posted for the Meeting]
>> WE'LL HAVE THE CHANCELLOR CERTIFIED.
>> I CERTIFY THAT THE MINUTES FOR THIS MEETING WAS POSTED ACCORDING TO TEXAS GOVERNMENT CODE 551504.
>> THE DIRECTOR IS UNAVAILABLE TODAY. HE'S TRAVELING OUT OF THE COUNTRY SO --
>> SO IF WE COULD, THE DIRECTOR IS OUT OF THE COUNTRY --
>> HE DOESN'T REALLY CARE, DOES
[2. Presentation of the 3rd Quarter Report from Internal Audit for Quarter Ended May 31, 2018 Committee Action: Review Presenter: Paul Styrvoky]
HE?>> NO, HE'S HAVING MORE FUN THAN WE ARE HAVING AT THE MOMENT SO I'M LITTLE UPSET ABOUT THAT.
WE HAVE DIRECTOR STYRVOKY WHO IS STANDING I.
>> A LITTLE BIT OF BACKGROUND ON YU, PAUL, IF YOU WOULD.
I'VE BEEN EMPLOYED BY THE DISTRICT FOR 8 YEARS IN THE ROLE OF I.T. AUDITOR.
TODAY I'D LIKE TO INTRODUCE HER.
SHE'S EEN WITH THE DISTRICT FOR FOUR YEARS.
WE ALSO HAVE LANA GRIFFIN WHO HAS BEEN WITH THE DISTRICT FOR FOUR YEARS AS AN AUDITOR TOO.
APRIL FULLER IS A COMPLIANCE SPECIALIST AND SHE'S BEEN WITH THE DISTRICT IN OUR DEPARTMENT FOR THREE YEARS, FIVE YEARS FOR THE DISTRICT TOTAL AND HEN ROB IS OUT OF THE COUNTRY TODAY.
SO IT IS MY HONOR AND PRIVILEGE TO SHARE TWO THINGS WITH YOU TODAY.
OUR QUARTERLY STATUS REPORT AND THEN OUR ANNUAL PLAN FOR NEXT YEAR.
WE COMPLETED FOUR ADD -- AUDITS.
THE AUDIT I COMPLETED WAS THE INFORMATION TECHNOLOGY GENERAL CONTROL.
WE LOOKED AT THE COLLEGE LOCA LOCATIONS.
IN PARTICULAR WE LOOKED FOR CHANGE MANAGEMENT PROCEDURES, BACK UP PROCEDURES AND ROOMS THAT HOUSE CRITICAL COMPUTERS.
WE DID NOT LOOK AT THE CLOSETS UPGRADED AND THE MOST SIGNIFICANT FINDINGS IN THAT AUDIT.
THE SECOND AUDIT THAT WE COMPLETED WAS THE STUDENT AND EXCHANGE VISITOR PROGRAM, THE DISTRICT HAS TO COMPLY WITH FEDERAL REGULATIONS IN TERMS OF HOW WE ADMIT ND ENROLL AND MAINTAIN THE ELIGIBILITY FOR OUR STUDENTS.
WE LOOKED AT 218 STUDENTS OUT OF A POPULATION OF NEARLY 6,000.
WE LOOKED AT ACTIVE AND CLOSED AND COMPLETED AND TERMINATED.
WE FOUND SOME MINOR ISSUES WITH SOME DOCUMENTATION FILES IN THE COURSE OF THE AUDIT SO THERE WERE NO ISSUES THAT REQUIRE FOLLOW UP ON OUR PART.
OUR THIRD AUDIT THAT WE LOOKED AT WAS EMPLOYEE TRAVEL EXPENSES AND THIS IS A REGULARLY SCHEDULED AUDIT THAT WE INCLUDE EVERY COMBREER.
WE COMPLY WITH NOT ONLY DISTRICT POLICY AND PROCEDURES BUT ALSO IRS REGULATIONS.
WE SELECTED 111 REIMBURSEMENTS.
WE FOUND SOME MINOR ISSUES RELATED TO PARKING RECEIPTS AND OTHER TIMELINESS BUT NOTHING THAT, AGAIN, THAT REQUIRE ANY MAJOR FOLLOW UP.
>> HOW DO YOU GET TO THAT 111?
>> THOSE ARE -- WE LOOKED AT ALL OF THE SIGNIFICANT ADMINISTRATORS WITHIN THE DISTRICT, WE LOOK AT VICE PRESIDENTS AND PRESIDENTS AT THE COLLEGES AND THEN WE ALSO USE
[00:05:03]
THE JUDGEMENT FOR DOLLAR SIZES.THEN I'D LIKE TO WELCOME TRUSTEE JAMESON.
I'M REPRESENTED DIRECTOR GARDINES TODAY.
WE ARE IN THE STATUS REPORT RIGHT NOW.
WE ARE TALKING ABOUT THE RICHLAND COLLEGIATE HIGH SCHOOL.
THIS IS AN ANNUAL AUDIT SELECTED BY THE BOARD OF TRUSTEES.
RICHLAND HAS MADE SIGNIFICANT IMPROVEMENTS OVER THE YEARS SO WE HAVE NO ISSUES IN THIS AREA.
CURRENTLY WE HAVE THE FOLLOWING AUDITS N PROGRESS, WE HAVE FINISHED BASICALLY THE FIELD WORK AS IT RELATES TO PHYSICAL INVENTORY.
IT WAS SOMEWHAT DELAYED IN TERMS OF COMPLETING THE INVENTORY.
SORT OF WENT INTO THE MAY TIME FRAME.
AT THIS POINT THERE'S NO MAJOR FINDINGS IN TERMS OF ITEMS, TYPICAL ITEMS WE WOULD WRITE OFF IN TERMS OF COMPUTERS AND SWITCHES AND MEDICAL EQUIPMENT IS TYPICAL FROM PREVIOUS YEARS.
WE HAVE GIST -- JUST STARTED THE UPWARD BOND GRANT FOR RICHLAND COLLEGE AS WELL AS THE DISASTER RECOVERY PLAN.
WE HAVE PULLED ALL OF THE LOCATIONS FOR TELECOMMUTING AND IDENTIFIED APPROXIMATELY 50 INDIVIDUALS WHO COMMUTE.
WE ARE IN THE PROCESS OF SCHEDULING INTERVIEWS WITH THE SUPERVISORS TO ISCUSS HOW THEY ARE BEING MONITORED AND TRACKED SO THE AGREEMENTS THEY SIGNED WITH THE DISTRICT ARE BEING SATISFIED.
ANY QUESTIONS ON WHAT WE'VE COMPLETED OR WHAT IS IN THE REPORT?
>> A COUPLE QUESTIONS ABOUT THE I.T. STUFF.
DOES THE SCOPE OF YOUR AUDIT INCLUDE A REVIEW OF THE SECURITY ASPECTS OF OUR OPERATIONS AND ALSO OUR COMPLIANCE WITH THE PRIVATE ACT?
IN FACT, IN THE PLAN YOU'LL SEE WE SPECIFICALLY HAVE AN AUDIT TO ADDRESS THAT.
WE HAVE DONE THAT IN PREVIOUS YEARS.
>> I WOULD IMAGINE WE MAY CHANGE.
HOW DOES THAT IMPACT THE AUDIT FUNCTION AND DO YOU HAVE FULL VISIBILITY INTO THOSE CHANGES?
WE REGULARLY GET WITH TIM MARSHON AND HIS STAFF ABOUT OUR PLAN AND OUR ON GOING MONITORING.
>> LAST COMMENT, NO FINDINGS -- THERE'S ALWAYS SOME SUGGESTIONS ABOUT THINGS THAT COULD BE DONE BETTER BUT ALL FOUR OF THESE AUDITS THERE'S NO FINDINGS SO WE ARE PERFECT.
>> WE ARE NOT PERFECT BUT WE FOUND ISSUES THAT DID NOT RISE TO THE LEVEL OF MANAGEMENT COMMENT.
CERTAINLY AS AN IMPROVEMENT ARE MINOR ISSUES THAT CAME UP DURING THE AUDIT.
WE COMMUNICATED THAT TO THE VICE PRESIDENTS AND PRESIDENTS BUT NOTHING THAT WAS INDICATED TO BREAK DOWN IN INTERNAL CONTROLS.
THAT'S WHAT WE ARE LOOKING FOR.
>> NOTHING MAJOR THAT WAS JUST SHOCKING?
MY FORM SAYS OTHER, OVER PAYMENTS AND UNDERPAYMENTS TO FACULTY IN 2016 AND 2017 UNDER FACULTY MILES ON INCENTIVE.
THAT'S AN AUDIT THAT HAS BEEN UNDERWAY WE TALKED WITH THE BOARD ABOUT IT SOMETIME AGO AND I BELIEVE THAT WE ARE GOING TO BRIEF THE BOARD ABOUT THAT AT ONE OF THE BOARD PLANNING SESSIONS COMING UP ON JUNE 25TH AND 27TH WITH SOME MORE INFORMATION FOR THAT.
IT MADE ITS WAY ON THE AGENDA BUT IT WASN'T AN ITEM FOR TODAY'S AUDIT OR NOT INTENDED TO BE.
>> WE'LL HAVE SOMETHING FOR YOU AND WE'LL BE REPORTING TO YOU ON JUNE 25TH ON THAT.
>> ND THAT WAS A VERY DETAILED ANALYSIS WHERE WE HAD LOOKED AT ALL THE FACULTY THAT ERE IDENTIFIED FOR THE MILESTONES AND WE WENT INTO THE COLLEAGUE SYSTEM ND LOOKED AT PAID AND NOT PAID.
THAT ANALYSIS HAS ALREADY BEEN DONE.
HE WILL LEAD FURTHER DISCUSSIONS ON THAT.
>> BECAUSE OF THIS PARTICULAR [INAUDIBLE]
[3. Presentation of the Audit Plan for Year 2018-19 from Internal Audit Committee Action: Review & Approve Presenter: Paul Styrvoky]
MOVING ONTO THE AUDIT PLAN REVIEW.
YOU HAVE OUR AUDIT PLAN FOR NEXT FISCAL YEAR.
THIS PLAN WAS PREPARED USING PRIOR YEARS OF RISK ASSESSMENT WHERE WE SENT OUT A VERY
[00:10:01]
DETAILED SPREADSHEET.THIS YEAR WE FOLLOWED UP WITH A NARRATIVE QUESTIONNAIRE TO THE LOCATIONS.
WE BUILT IN REOCCURRING AUDITS AND THEN WE FACTORED IN AREAS.
SO I'LL TAKE A MOMENT JUST TO LOOK THROUGH THERE.
>> YOU MIGHT JUST TELL THE COMMITTEE AND THE BOARD MEMBERS THAT ARE PRESENT HOW YOU DEVELOPED THE PLAN, WHAT YOU LOOK AT IN TERMS OF IN ADDITION TO DOING THE RISK ASSESSMENT, HOW MANY HOURS ARE AVAILABLE AND EXPLAIN.
>> 'LL BACK UP. WE TYPICALLY HAVE A CAPABILITY TO DO BETWEEN 20 AND 22 AUDITS A YEAR.
TYPICALLY ALLOW 30 A DAY PER AUDIT.
BY DOING THAT WE ALSO HAVE TIME TO DO SPECIAL PROJECTS DURING THE YEAR, MANAGEMENT REQUESTED AUDITS, SPECIAL INVESTIGATIONS.
WE LOOK AT AREAS PARTICULARLY FOR COMPLIANCE WITH DISTRICT POLICY AND POCEDURES.
SO THAT'S WHY, FOR EXAMPLE, THE REOCCURRING AUDITS FOR CASH COUNTS, PHYSICAL ASSETS AND EMPLOYEE TRAVEL EXPENSES AND SO FORTH ARE THERE.
WE DID ADD SOME ONES THAT WE'VE DONE IN THE PAST THIS YEAR WHERE WE HAD PROBLEMS. I CALL YOUR ATTENTION TO AUDIT NUMBER 12, THE DAY TEACHING AUDIT.
THERE HAS BEEN SOME CONTROLS CHANGED IN THAT AREA SO WE THOUGHT IT WOULD BE PRUDENT TO FOLLOW UP THERE.
AS WELL, ONE OF THE AREAS THAT WE LOOKED AT MANY, MANY YEARS AGO WERE THE TAX SHELTERED ANNUITIES CONTRIBUTIONS IN TERMS OF COMPLCOMPLIANCE, MAKING SURE THE DISTRICT IS NOT ALLOWING EMPLOYEES TO OVERLY CONTRIBUTE TO THOSE INVESTMENTS AS WELL AS OUR DISTRICT INVESTMENTS POLICIES AND PROCEDURES.
IN ADDITION TO OUR ON GOING GRANT MONITORING, WE TYPICALLY INCLUDE TWO TO THREE GRANTS IN OUR AUDIT PLAN PER YEAR WHERE WE DO A TRADITIONAL AUDIT AND THOSE WOULD BE ITEMS 21 AND 22 ON THE PLAN.
>> BOARD POLICY REQUIRES THE AUDIT COMMITTEE TO RECOMMEND THE BOARD FULL APPROVAL FOR AN AUDIT FOR THE COMING FISCAL YEAR.
SO THIS PROPOSED AUDIT PLAN IS FOUND O BE ACCEPTABLE BY THE COMMITTEE TODAY.
WE'LL BE ON THE -- IT'S ON THE FULL AGENDA FOR THE 4:00 MEETING ON THE CONSENT AGENDA FOR APPROVAL.
SO IT WOULD BE -- IT WOULD BE APPROPRIATE TO THE PLAN.
YOU CAN ASK ANY QUESTIONS OF PAUL WITH RESPECT TO THAT AND THEN WE WILL COME OUT OF HERE WITH A RECOMMENDATION FOR THE FULL BOARD.
>> NUMBER 7? IS THAT FOR A GIVEN ONE LOCATION OR IS THAT FOR MORE THAN ONE LOCATION?
>> THAT WOULD BE FOR ALL DISTRICT ISSUED GASOLINE CREDIT CARDS.CA
>> AND THAT'S WHAT KIND OF PERCENTAGE?
YEAH, WE WOULD LOOK AT CREDIT CARDS.
NUMBER ONE WE LOOK AT THE PHYSICAL CONTROL OF THOSE CARDS BECAUSE THERE'S AN INVENTORY OF WHO SHOULD HAVE THOSE AND TWO WE LOOK AT THE UTILIZATION OF THOSE CARDS.
FOR EXAMPLE IN THE PAST THERE WAS AN ISSUE WITH SOME THAT WERE NOT VALID.
WHO HAS THE CARDS, HOW THEY ARE USED.
>> THERE WAS A $17,000 OOPSIE.
>> THERE WERE SOME SIGNIFICANT PROBLEMS.
>> WERE THERE ANY OTHER AREAS OF AUDIT THAT ARE NOT INCLUDED IN THIS YEAR'S --
>> AUDIT IS PART OF MINIMIZING RISK, RIGHT, AND COULD YOU RECAP A LITTLE BIT ABOUT HOW WE APPROACH RISK MANAGEMENT FROM AN ENTERPRISE POINT OF VIEW, WHAT YOU SEE IS THE TOP THREE OR FOUR AREAS OF RISK EXPOSURE AND WHETHER WE ARE ALIGNING OUR INTERNAL AUDIT TO ADDRESS THOSE AREAS?
>> WELL, WE ARE ENDEAVORING TO DO SO.
THE APPROACH THAT WE'VE TAKEN IN IN INTERNAL AUDIT THIS YEAR HAS BEEN TO TAKE MORE OF A RISK MANAGEMENT OR RISK ASSESSMENT APPROACH.
THIS YEAR I WOULD DEFER TO PAUL ON THE RISK MANAGEMENT BUT I THINK THAT WE DO DIRECT THE PERSONNEL IN THAT AREA TO ENSURE THAT WE ADDRESS THOSE AREAS THAT ARE OF THE KEENEST INTEREST IN TERMS OF ASSESSING AND EVALUATING RISK.
IN TERMS OF PUTTING THOSE OUT, I DON'T KNOW WHAT THE SURVEYS SHOWED OR THE COLLABORATIONS SHOWED IN TERMS OF THIS.
PAUL, CAN YOU HELP ME THERE IN TERMS OF THE AIREAS THAT WE
[00:15:01]
IDENTIFIED AS HIGHEST RISK FROM THE ENTERPRISE?>> WHAT WE HEARD FROM THE LOCATIONS WERE THINGS SUCH AS PUBLIC SAFETY AND SECURITY, BACK UP, MANY, ANY OTHERS.
THEN OBVIOUSLY THE CHAPTERS, WHAT WAS BEING DEALT WITH, SUCH AS STUDENT BANKING PAYMENTS WHEN THEY ARE REGISTERS AND SO POINT.
>> TRUSTEE RITTER, TO YOU POINT, THE GREATEST AREAS OF RISK FOR AN ENTERPRISE SUCH AS THE DISTRICT IS THE CYBER ATTACK, THE SECURITY AND PRIVACY OF THE INFORMATION THAT WE MAINTAIN ON OUR STUDENTS AND THOSE STUDENTS, FACULTY AND STAFF AS WELL.
WE ARE UNDER, AS WE DISCUSSED PREVIOUSLY, DAILY ATTACK FROM THOSE THAT WOULD BE BENT ON TRYING TO ACCESS OUR SYSTEM.
SO I THINK -- PAUL FROM THE I.T.
PERSPECTIVE I THINK THAT THAT'S ONE THAT'S IN OUR REVIEW OF PROCEDURES AND HOW WE GO ABOUT PROTECTING THE INFORMATION BEING MAINTAINED.
I WOULD SAY FROM THE GENERAL ONE OF THE KEY AREAS OF RISK E FACE AS AN ENTERPRISE. THAT'S NOT UNIQUE IN THE DISTRICT CERTAINLY, THAT'S INSTITUTION OF THE HIGHER EDUCATION IN A WHOLE HAS SEEN THAT OVER THE PAST FEW YEARS, BEING AN AREA OF PRIMARY EXPOSURE FOR RISK AND ONE WE HAD TO DDRESS AND CONTINUE TO ADDRESS.
>> I'M GLAD YOU BROUGHT THAT UP.
IF YOU LOOK AT ITEM NUMBER 20 IN THE PLAN, WE SPECIFICALLY HAVING WORKED WITH OUR CYBER SECURITY FUNCTION OVER THE LAST YEAR OR SO HAVE IDENTIFIED THAT S A HIGH RISK AREA AND WE ARE BUILDING COVERAGE INTO THAT AREA, RISK COVERAGE ANALYSIS.
>> OTHER QUESTIONS, COMMENTS IN -- COMMENTS? OKAY.
>> I THINK IT WOULD BE HELPFUL TO GET A SENSE FROM THE COMMITTEE ABOUT THE PLAN, RECOMMENDATIONS TO THE BOARD.
>> SECOND? A SECOND? ALL IN FAVOR?
>> I THINK IT WOULD BE HELPFUL TO THE BOARD OR THE COMMITTEE TO HEAR A PRESENTATION ON ENTERPRISE RISK AS A PREDICATE TO AN INTERNAL AUDIT PLAN.
WE'VE BEEN TRYING TO MOVE -- AS WE MOVE INTO THIS NEXT ITEM I'LL TALK ABOUT THE AREAS WHERE WE ARE TRYING TO ENHANCE HE APPROACH THAT WE TAKE TO THE DEVELOPMENT OF THE ANNUAL AUDIT PLAN, THE RESOURCES WE DEPEND UPON.
THE RISK MANAGEMENT APPROACH IS ONE THAT CERTAINLY DOES PRACTICE AND ONE THAT WE SHOULD BE ADHERING TO AND INVOLVING OTHER STAKE HOLDERS.
AS PAUL INDICATED WITH THE INTERNAL AUDIT, IT STARTED WITH A RISK ASSESSMENT PROCESS LAST YEAR, IMPROVED UPON THAT -- I SAY IMPROVED UPON BUT EXPANDED THAT APPROACH WITH A SURVEY PROCESS IN DEVELOPMENT AND ONE THAT WE THINK WE CAN CONTINUE TO MAKE IMPROVEMENTS ONTO MAKE SURE THAT WE ARE BRINGING TO THE BOARD AND TO THE AUDIT COMMITTEE AND THE BOARD AS A WHOLE THE BEST, MOST EFFECTIVE PLAN WE COULD HAVE FOR INTERNAL AUDIT OPERATIONS FOR THE NEXT FISCAL YEAR.
WITH THAT WE ARE LOOKING AT BRINGING EXACTLY THAT KIND OF A PROGRAM OR PRESENTATION TO THE BOARD SO THAT THEY ARE AWARE OF THEIR OBLIGATIONS IN RESPECT TO LOOKING AT RISK MANAGEMENT.
IT DOES TOUCH EVERYTHING THAT YOU DO AS BOARD MEMBERS AND THAT THE DISTRICT DOES OPERATIONALLY AS WELL.
>> I KNOW YOU SAID THAT'S AN AREA OF YOUR EXPERTISE.
DO WE HAVE THE STAFF TO KEEP UP WITH THE RAPIDLY CHANGING CYBER SECURITY ISSUES THAT OCCUR ON A DAILY BASIS, THE HOURLY BASIS?
>> BASED ON THE PREVIOUS AMOUNT OF ACTIVITY THAT THIS ENTAILED, WE HAVE PUT TO JOHN AND A NUMBER OF STAFF CHANGES THAT WE BELIEVE THAT HAS TO BE HAD TO [INAUDIBLE] SO WE ARE INCREASING THAT STAFF.
WE ARE ALSO ASKING AND IT WILL PROBABLY COME THROUGH THE BOARD A NUMBER OF TOOLS THAT WE NEED IN PLACE TO ALLOW OUR STAFF TO DO THIS WORK.
RIGHT NOW WE ARE DOING THAT MANUALLY.
IT TAKES TIME TO GET THROUGH SOME OF THE ACTIVITIES.
ONE WENT OUT THROUGH THE LAST THREE OR FOUR INTERNAL AUDITS PLUS OUR MONITORING , OUR STAFF
[00:20:04]
IS MORE AND MORE ENGAGED IN DOING.>> I THINK, TIM, IT'S FAIR TO SAY THAT WE ARE CERTAINLY SEEING AN INCREASE IN THE NUMBER OF PEOPLE TRYING TO ACCESS OUR SYSTEMS MORE THAN IN PRIOR YEARS.
>> WE'VE TAKEN A MULTIPHASED APPROACH TO THIS IN THE DISTRICT.
WE DID WHAT THE BOARD -- WE HAVE CYBER INSURANCE A COUPLE OF BUDGETS AGO.
THAT'S IDENTIFIED FOR US THAT WE NEED TO HAVE THESE ENHANCED RESOURCES IN HOUSE AS WELL.
I'VE BEEN INVOLVED IN THOSE DISCUSSIONS AS WELL.
WE DO LOOK AT THIS AS AN AREA OF PRIMARY IMPORTANCE BECAUSE OF THE LEVEL HERE.
IT MAKES US A TARGET OF OPPORTUNITY.
>> JUST A NOTE, THE KEY RISK CONTINUES TO BE THE PEOPLE OVER TECHNOLOGY WHO LEAVE THEIR PASSWORDS OR OTHER THINGS AROUND.
THAT PUTS US AT THE GREATEST RISK.
>> WE CONTINUE TO WORK ON THOSE AS WELL.
I WILL BE COMING WITH PROPOSALS FOR THE DISTRICT IN TERMS OF FACTORS ON THINGS THAT WE CAN DO TO PUT IN PLACE TO MAKE OURSELVES EVEN MORE SECURE.
>> GETTING BACK TO RISK ASSESSMENT, WE USED TO GET A PERIODIC REPORT, THE BOARD DID, IN TERMS OF RISK ASSESSMENT, AREA THEY INQUIRED ABOUT AND STAFF THAT ORDERED GRANTS WHAT DID THEY KNOW AND WHAT DID THEY NOT KNOW AND THEN IT WOULD GET REPORTED TO US AND HOW IT WAS ADDRESSED.
I DON'T KNOW, MAYBE STARTING THAT AGAIN BECAUSE IT WAS VERY INFORMATIVE AND IT MADE SURE IN TERMS OF IT COMING -- IN TERMS OF TRAINING OR WHATEVER.
>> I BELIEVE, TRUSTEE, YOU'RE REFERRING TO SOMETHING WE DID BEFORE CALLED THE SELF-ASSESSMENT.
>> I'M RECALLING MY HISTORY WITH THE GROUP AND I THINK THAT'S A GOOD IDEA THAT WE SHOULD TAKE ANOTHER LOOK AT IT.
>> I'M NOT SURE WHY WE QUIT GIVING THAT BUT IT JUST HELPED US REALLY BE INFORMED ON THAT.
[4. Discussion Regarding Process for Search of New Director of Internal Audit Presenter: Rob Wendland]
>> THAT'S A NICE SEGWAY INTO IT.
THANK YOU, PAUL FOR BEING HERE FOR RAFAEL.
HE HAS ANNOUNCED HIS RETIREMEN EFFECTIVE AUGUST 31ST.
SO WE IN LOOKING AT THE DEPARTURE OF RAFAEL AND HIS FINE SERVICE TO THE DIRECT -- DISTRICT OVER THAT PERIOD OF TIME, IT'S TIME FOR US TO IVE INTO AN ANALYSIS INTO THE INTERNAL AUDIT OPERATIONS, WHAT OUR CAPACITIES ARE, WHAT WE ARE DOING AND BENCHMARKING THOSE AGAINST BEST PRACTICES AND WHERE INTERNAL AUDIT SHOULD BE IF IT'S NOT THERE AND WHERE IT NEEDS TO BE IN THE FUTURE.
WE ARE LOOKING FOR A SUCCESSOR FOR RAFAEL.
TO ASSIST US WE ENGAGED GRAHAM THORNTON WHO HAS AN OUTSIDE AUDITOR FOR THE DIRECT FOR THE LAST SEVERAL YEARS AND THEY HAVE A SPECIAL AREA OF PRACTICE THAT3 ASSISTS ENTITIES WITH BEST PRACTICES FOR INTERNAL AUDITS.
THEY HAVE BEEN ENGAGED FOR THE LAST SEVERAL WEKS, ENGAGING WITH PAUL AND OTHERS IN AUDIT AND OTHER KEY STAKEHOLDERS IN BUSINESS AND SOME OF THE BOARD MEMBERS HAVE BEEN CONTACTED, I APPRECIATE YOUR INVOLVEMENT WITH THAT.
THEY ARE GOING TO DO AN ASSESSMENT.
THEY HAVE NOT COMPLETED THEIR WORK BUT HEY RE GOING TO DO AN ASSESSMENT TO IDENTIFY NOT ONLY WHAT OUR PRESENT CAPACITIES ARE AND THE STRENGTHS THAT WE HAVE IN INTERNAL AUDIT BUT WHERE E NEED TO BE FOR AN ENTERPRISE OF THIS SIZE.
IF YOU WILL, TO THE GRAHAM THORNTON FOLKS, THERE WAS NO THIRD RAIL THEY HAD TO AVOID IN TERMS OF TAKING AN ASSESSMENT AND LOOKING AT US.
THAT'S WITH ALL THE FINE FOLKS WE HAVE.
IF THERE'S DOING THINGS, EITHER A REPORTING STRUCTURE, ORGANIZATIONAL STRUCTURE, ANYTHING OF THAT NATURE, THIS IS THE TIME FOR US TO TAKE A LOOK AT THAT AS WE LOOK TO IDENTIFYING A SUCCESSOR FOR RAFAEL AND WHERE WE NEED TO BE STAFFING, THE COMPETENT APPROACH WE TAKE.
AGAIN, I'LL BE IN OVER MY HEAD QUICKLY WHEN I START TALKING ABOUT THESE THINGS, BUT THERE ARE OPERATIONAL INTERNAL CONTROL TYPE AUDITS LIKE PAUL HAS BEEN DESCRIBING THAT WE DO ON A REGULAR BASIS VERY EFFECTIVELY BUT WE DON'T REALLY DO PERFORMANCE AUDITS IN THE DISTRICT.
WE WE HAVEN'T HISTORICALLY DONE AUDITS TO SAY IS THIS PROGRAM PERFORMING LIKE IT'S SUPPOSED TO BE PERFORMING.
THAT MIGHT REQUIRE SOME COMPETENCIES OR CAPACITIES THAT WE DON'T PRESENTLY HAVE OR THAT
[00:25:02]
WE HAVEN'T TAPPED THUS FAR.WE WANT TO LOOK AT ALL OF THAT AS WE MOVE INTO THE ROLE OF SUCCEEDING SOMEBODY WHO HAS BEEN HERE 30 YEARS AND DONE FINE SERVICE FOR THE DISTRICT BUT THEN ACTUALLY PULLING OUT INTERNAL AUDIT ABILITIES TO BEST SERVE THE DISTRICT IN THE MOST EFFECTIVE WAY.
THAT'S A LONG WAY OF SAYING THEY ARE ENGAGED, THEY INTEND TO COME OUT WITH AN ASSESSMENT REPORT HERE VERY SHORTLY.
I DIDN'T EXPECT IT AND I DON'T WANT IT TODAY.
THAT WILL THEN PROVIDE A FRAME WORK FOR US DEVELOPING A SEARCH FOR SOME BEST -- OR THE MOST [INAUDIBLE] INTO THE AREAS OF OPERATION THAT HAS NOT BEEN INVOLVED HERE BEFORE.
THEY WON'T BE DOING THE SEARCH FOR US BUT THEY'LL ASSIST US IN DEVELOPING THE CRITERIA FOR THE SEARCH, THE COMPETENCIES WE WANT TO IDENTIFY IN THE NEXT DIRECTOR OF INTERNAL AUDIT.
AS YOU CAN IMAGINE, THERE'S TECHNOLOGICAL CHANGES.
THERE'S AREAS THAT WE CAN LOOK AT IN TERMS OF PRACTICE THAT WE CAN LEVERAGE AND MAKE OURSELVES EVEN ORE EFFECTIVE.
INDEED THEY WILL TELL US IF WE HAVE THE NUMBER OF STAFF THAT WE NEED IN THAT AREA OR IF WE NEED MORE STAFF OR DIFFERENT KIND OF STAFF.
WE THOUGHT THIS WAS A GOOD TIME IN INTERNAL AUDIT TO TAKE A LOOK AT IT.
THAT'S WHAT WE TASKED GRAHAM THORNTON TO DO TO ASSIST US.
SO THEY HAVE BEEN WORKING VERY DILIGENTLY.
I FULLY EXPECT A REPORT IN SHORT ORDER AND THEN I WILL UPDATE THE BOARD AND THE COMMITTEE AS WE GO FORWARD.
ONE OF THE THINGS, IN MY MIND WITH THE FOLKS AT GRAHAM THORNTON, THEY SAID WHAT KIND OF TRAINING DO YOU HAVE FOR YOUR BOARD MEMBERS AND YOUR AUDIT COMMITTEE MEMBERS IN PARTICULAR ABOUT THEIR OBLIGATIONS AS AUDIT COMMITTEE MEMBERS AND/OR BOARD MEMBERS IN TERMS OF DEVELOPMENT WITH RESPECT TO SOME OF THESE AREAS, ASSESSMENT RISK, INTERN PRIZE -- INTERNAL RISK.
I SAID WE HAVE NOT DONE THAT FOR OUR BOARD OR COMMITTEE MEMBERS.
THEY ARE GOING TO IDENTIFY RESOURCES TO ASSIST THE BOARD IN IDENTIFYING THEIR ROLE FOR INTERNAL AUDIT, RISK MANAGEMENT AND OTHERS IN ENDEAVORS THEY DO FOR THE DISTRICT.
I THINK THEY ARE GOING TO COME BACK WITH SOME VERY SOUND RECOMMENDATIONS.
THE GRAHAM THORNTON PEOPLE ACTUALLY CALLED HIM OUT IN A MEETING WITH ME AND SAID THAT HE'S BEEN AN INCREDIBLE RESOURCE TO THEM, GETTING THEM HISTORICAL DOCUMENTS.
SO PAUL SHOULD BE COMMENDED FOR THAT AS WELL.
IT'S BEST FOR OUR STUDENTS TO BE SUCCESSFUL.
>> FOOTNOTE, AS PART OF OUR RESPONSIBILITIES AS A BOARD, WE GET THAT INFORMATION FROM GRAHAM THORNTON TO EDUCATE, I WOULD APPRO APPRECIATE THAT.
I THINK THAT WILL HARMONIZE IN WHAT YOU ARE DOING IN TERMS OF THE BOARD'S SELF-EVALUATION PROCESS.
EVERY RESOURCE WE CAN BRING TO THE BOARD MAKING THE BOARD MORE EFFECTIVE.
SIMILARLY FOR ALL OF US IN THE DISTRICT, INTERNAL AUDIT AND ALL THE OTHER DEPARTMENTS, ANYTHING THAT WE CAN DO TO MAKE THAT OPERATION MORE EFFECTIVE AND MORE BENEFIT AS PAUL SAID IT'S ULTIMATELY FOR THOSE THAT WE SERVE THAT WE BE AS EFFICIENT AND CAPABLE AS POSSIBLE IN ALL
[5. Review of Chancellor’s Travel Report Committee Action: No Action Required]
THESE AREAS.>> THERE'S NO ACTION REQUIRED ON THAT.
I THINK YOU PROBABLY HAVE THAT.
>> ON THE FIRST ITEM WHAT DOES RC STAND FOR?
>> IT'S A COALITION OF ABOUT 20 -- EXCUSE ME, URBAN COLLEGES.
I ACTUALLY DON'T KNOW WHAT THE R STANDS FOR EITHER.
>> YOU MIGHT HAVE TO CHANGE YOUR NAME SOON.
>> I BELIEVE THAT THAT COVERS EVERYTHING THAT WE INTENDED TO COVER WITH THE AUDIT COMMITTEE TODAY.
>> ANY QUESTIONS OR COMMENTS? [INAUDIBLE]
>> ANYTHING ELSE?
* This transcript was compiled from uncorrected Closed Captioning.