11a. Memo - 2021 Internal Audit Annual Briefing
COMMISSION AGENDA MEMORANDUM Item No. 11a BRIEFING ITEM Date of Meeting December 14, 2021 DATE: December 1, 2021 TO: Stephen P. Metruck, Executive Director FROM: Glenn Fernandes, Director, Internal Audit SUBJECT: 2021 Internal Audit Annual Briefing EXECUTIVE SUMMARY The purpose of this memo is to brief the Commission and the public on audits performed in the 2021 calendar year. The 2021 Audit Plan was approved at the December 10, 2020, Audit Committee Meeting. Internal Audit has completed 19 audit reports for the Audit Committee in 2021. Additionally, a memo was issued. The audits identified 4 High Risk, 12 Medium Risk and 5 Low Risk issues for management action. Implementation of the associated recommendations will strengthen internal controls, enhance processes, and improve efficiencies. Internal Audit has a process in place where we periodically follow up on recommendations and agreed upon management action plans to assure action is taken. This process also relies on attestations from Management. Delinquent action plans are periodically brought to the Audit Committee's attention. BACKGROUND On December 11, 2007, the Port of Seattle (Port) Commission passed a motion, which resulted in the creation of an independent and objective Internal Audit function. In discharging their duty, the Internal Audit Director and his staff are accountable to the Audit Committee and to the Executive Director. For 2021, Commissioner Bowman chaired the Audit Committee and Commissioner Cho served as the other commission member. Dr. Christina Gehrke, Principal Faculty, City University of Seattle, served as the external member of the Audit Committee. The Audit Committee serves as an arm of the Port Commission. Internal Audit conducts independent, objective, risk-based audits of the Port's operations, activities, and vendors. Our audits add value by helping the Port achieve its mission and contribute to: financial stewardship, accountability, transparency, governance, and operational excellence. Internal Audit derives its authority from the Port Commission. Template revised April 12, 2018. COMMISSION AGENDA Briefing Item No. 11a Page 2 of 2 Meeting Date: December 14, 2021 LISTING OF 2021 INTERNAL AUDITS COMPLETED Below is a list of audits completed by Internal Audit in 2021. These audits are categorized by audit type. Operational: 1) Noise Monitor Data Accuracy 2) South King County Fund1 3) Art Program1 4) TNC (Lyft, Inc. & Rasier, LLC) 5) Rent and Concession Deferral Recovery 6) Capitalization of Assets Operational - Capital: 7) Central Terminal Infrastructure Upgrade (Construction and Closeout Phases)1 8) Restroom Renovations Phase 3 Prototype 9) Baggage Optimization - Phase 2 10) North Terminals Utilities Upgrade - Phase 1 Information Technology2: 11) Malware Defenses - Aviation Maintenance 12) Biometrics 13) Payment Card Industry (PCI) Compliance 14) Continuous Vulnerability Management 15) Data Recovery Limited Contract Compliance: 16) Seattle-Tacoma International Limousine Association (STILA) 17) Lenlyn Limited 18) Fruit & Flower, LLC d/b/a Floret 19) Dilettante Chocolate, Inc. Special Project by Management Request: 20) Cruise Season Rent Credit Review of Cruise Terminals of America3 1 Highlighted audits have findings that are discussed in more detail to the Commission. 2 Security Sensitive Exempt from public disclosure per RCW 42.56.420; these will not be discussed. 3 This was a focused analysis, not an audit, accordingly, Internal Audit issued a memo. ATTACHMENTS TO THIS BRIEFING (1) Presentation PREVIOUS COMMISSION ACTIONS OR BRIEFINGS December 8, 2020 The Commission was briefed on 2020 completed audits. December 10, 2019 The Commission was briefed on 2019 completed audits. Template revised September 22, 2016.
Limitations of Translatable Documents
PDF files are created with text and images are placed at an exact position on a page of a fixed size.
Web pages are fluid in nature, and the exact positioning of PDF text creates presentation problems.
PDFs that are full page graphics, or scanned pages are generally unable to be made accessible, In these cases, viewing whatever plain text could be extracted is the only alternative.