Minutes

P.O. Box 1209 
Seattle, Washington 98111 
www.portseattle.org 
206.787.3000 
APPROVED MINUTES 
AUDIT COMMITTEE SPECIAL MEETING OCTOBER 10, 2016 
The Port of Seattle Commission Audit Committee met in a special meeting Monday, October 10, 2016, in
the Commission Chambers at Pier 69, 2711 Alaskan Way, Seattle, Washington. Committee members
present included Commissioner Albro, Commissioner Creighton, and Christina Gehrke. Also present were 
David Soike, Chief Operating Officer; Joyce Kirangi, Internal Audit Department Director; Jessica Martin-
Carscadden, Internal Audit Manager; Joe Simmons, State Audit Manager; Melia Lucero, Assistant State
Auditor; Laurie Tish, Partner, Moss Adams; Olga Darlington, Partner, Moss Adams; Chris Apgar, Apgar and
Associates; Aaron Pritchard, Commission Issues and Policy Manager; and Amy Dressler, Assistant 
Commission Clerk. 
Call to Order: 
The committee special meeting was called to order at 9:05 a.m. by Commissioner Albro. 
Approval of Audit Committee Meeting Minutes of August 8, 2016: 
The minutes of the Audit Committee special meeting of August 8, 2016, were approved. 
External Audit  State Auditor's Entrance Meeting 
The Committee received a presentation from Mr. Simmons and Ms. Lucero that contained the following
information: 
This audit will cover fiscal year 2015. 
A separate report will be provided for the Industrial Development Corporation. 
Precise areas of focus are still being determined. 
The audit is scheduled to be exited in December, 2016. 
Without objection, the committee proceeded to  
External Audit  Health Insurance Portability and Accountability Act 
The Committee received a presentation from Mr. Apgar that contained the following information: 
The purpose of this audit was to ensure that the Port is in compliance with the requirements of the
Health Insurance Portability and Accountability Act (HIPAA). 
The audit found that Port policies should be enhanced in the following areas: 
o  Access termination policy: A formal policy should be adopted to ensure that terminated
employees can no longer access Port information or assets. Management responded that

Audio recordings of meeting proceedings and meeting materials are available on the Port of Seattle web site: www.portseattle.org



PORT COMMISSION AUDIT COMMITTEE MEETING MINUTES         Page 2 of 4 
MONDAY, OCTOBER 10, 2016 
a review of HIPAA related practices is planned for 2017, and will include a formal policy
regarding devices held by involuntarily terminated employees. 
o  Mobile device usage: A policy is needed regarding access by Port employees to email and
other Port digital assets from personal mobile devices. Management responded that
although a solution is in place that enforces passcode length and encryption on personal
devices, adoption of a formal personal device policy is in order. 
o  Destruction of media: A procedure needs to be established to ensure proper destruction of
documents by benefits department staff and Port vendors when media is at the end of its
useful life. Management responded that the Code of Conduct prohibits storage of HIPAA
information on removable media or portable devices, and that the HIPAA Security Plan will
be updated to include destruction processes. 
It was concluded that although policies need to altered or drafted to explicitly address HIPAA in
order to be fully compliant, the Port is approaching full compliance. 
Commissioner Albro requested and received clarification that although formal policies need to be
altered to explicitly address HIPAA, the Port's current policies and procedures do not create a risk of a
HIPAA breach. 
The committee then returned to  
External Audit  Moss Adams Engagement Service Plan (entrance meeting) 
The Committee received a presentation from Ms. Tish and Ms. Darrington that contained the following
information: 
Audit team members from prior years are returning. 
Moss Adams will: 
o  Audit and report on financial statements for the Enterprise Fund and Warehouseman's
Pension Trust Fund for inclusion in the Comprehensive Annual Financial Report; 
o  Audit and report on internal control and financial reporting compliance; audit and report on
compliance regarding the Airport Improvement Program and other Major Federal Award
Programs; 
o  Audit and report on the Passenger Facility Charge program. 
o  Audit and report on the schedule of net revenues available for revenue bond debt service. 
o  Perform agreed upon procedures and report to the State of Washington Department of
Ecology regarding the Terminal 91 Facility. 
Auditors' responsibilities will include application of accounting standards, reporting on  noncompliance
, and communication with the Audit Committee and management. 
Management's responsibilities will include preparation of correct financial statements, report of
fraud, and availability to work with auditors, and communication with the audit team. 
Areas of emphasis will include pension liability and establishing procedures for working with the
Northwest Seaport Alliance's audit team. 
Field work will be finished in March 2017, review will be conducted in April 2017, and an exit
conference is anticipated for May 2017.





PORT COMMISSION AUDIT COMMITTEE MEETING MINUTES         Page 3 of 4 
MONDAY, OCTOBER 10, 2016 
Staff Report  2016 Flexible Work Plan Update: 
The committee received a report from Ms. Martin-Carscadden that included the following information: 
All but three of the proposed audits in the 2016 Flexible Work Plan have been completed. 
Outstanding audits are Radio Communication Equipment, Airport Terminal Janitorial Services, and
Landside Employee Parking. 
Radio Communication Equipment is an Information Technology audit, and will be performed by an
external contractor. 
The Airport Janitorial Contract audit will commence shortly. 
Staff proposes postponing the Landside Employee Parking audit because there have already been
two audits with findings in that department, and a delay will give them a chance to address issues
and implement new controls. 
In lieu of Landside Employee Parking, staff would like to do a comprehensive audit of Aviation
Utilities instead. This audit was performed once in 2011, and is a good fit for the remaining budget
and staff time in 2016. 
The replacement of the Landside Employee Parking comprehensive audit with an Aviation Utilities
comprehensive audit on the 2016 Flexible Work Plan was approved. 
Staff Report  Management Update on Contract Administration: 
Mr. Soike reported that new tools have been created for Port-wide contract management, including a
definition document for aviation leases that delineates important components of the lease, a contract
administration plan that identifies which position is responsible for monitoring lease terms, a responsibility
matrix, and a contract compliance checklist. 
Lease and Concession Audit  Mad Anthony's at Pier 66 and Chinook's at Fishermen's Terminal: 
Without objection, a written report was accepted in lieu of a verbal presentation on the Internal Audit Report
for Mad Anthony's at Pier 66 and Chinook's at Fishermen's Terminal, covering the period of January 1,
2014-December 21, 2015. The purpose of the audit, as reported, was to determine whether Port
management monitoring controls are adequate and effective to ensure: 
Mad Anthony's, Inc., reported concession fees were complete,properly calculated, and remitted
timely to the Port; and 
Mad Anthony's, Inc., complied with significant financial provisions of the agreement. 
The report included no findings of significance and there was no discussion of this agenda item. 
Lease and Concession Audit Clipper Navigation: 
The Committee received a presentation  from Ms. Martin-Carscadden  that included the following
information: 
This audit covered the period of May 1, 2014-April 30, 2016. 
The purpose of this audit was to evaluate the design and operating effectiveness of Port
Management monitoring controls, and to determine compliance with terms and conditions within
the lease agreement (including accuracy and timeliness of payments, rent surety, and insurance).




PORT COMMISSION AUDIT COMMITTEE MEETING MINUTES         Page 4 of 4 
MONDAY, OCTOBER 10, 2016 
It was found that while the new lease was signed on April 24, 2014, a letter of credit was not
obtained until September 2016. 
Mr. Soike commented that new processes regarding contract administration would have caught this issue. 
Proposed 2017 Internal Audit Budget: 
The committee received a presentation from Ms. Martin-Carscadden that included the following information: 
The proposed budget for 2017 includes an increase of $400,000-370,000 for outside services, to
include Information Technology risk assessment, and to supplement Internal Audit with an outside
contractor for capital improvement audits. 
An Information Technology risk assessment was performed in 2012; at the end of 2017, the audits
identified there will have been completed. 
Committee members inquired about the consequences of not doing a risk assessment in 2017, and were
informed that doing so would mean that the planned IT audits for 2017 will be the last, until a new risk
assessment is performed. Commissioner Albro indicated that he would prefer to focus on an outside
contractor for Capital Development and postpone the IT risk assessment. 
The 2017 budget proposal was approved, with the removal of $190,000 proposed for an Information
Technology risk assessment, for a total budget of $1,779,837. 
Request for Review of Audit Committee and Internal Audit Charters: 
Ms. Kirangi noted that the charters for the Internal Audit department and Audit Committee are due for
review, and requested that the committee review these and discuss opportunities for revision at the next
Audit Committee meeting. 
Adjournment: 
There being no further business, the special meeting was adjourned 10:40 a.m. 
Fred Felleman 
Minutes approved: March 24, 2017.

Limitations of Translatable Documents

PDF files are created with text and images are placed at an exact position on a page of a fixed size.
Web pages are fluid in nature, and the exact positioning of PDF text creates presentation problems.
PDFs that are full page graphics, or scanned pages are generally unable to be made accessible, In these cases, viewing whatever plain text could be extracted is the only alternative.