2021_04_08_SCM_Audit_Presentation
Financial Stewardship Accountability Transparency Port of Seattle Audit Committee Internal Audit Update Glenn Fernandes - Director, Internal Audit April 8, 2021 Remote Meeting 2:30 PM – 4:30 PM Operational Excellence Governance Internal Audit Director’s Annual Communication Annual communication required by the Institute of Internal Auditors’ International Standards for the Professional Practice of Internal Auditing (IIA Standards) on: Organizational independence Internal Audit Charter Quality assurance and improvement program Open issue follow-up and monitoring process 2 Independence Requirement IIA Standard 1110 requires annual confirmation of organizational independence. Internal Audit Department continues to maintain organizational independence by reporting functionally to the Audit Committee and administratively to the Executive Director. 3 Quality Assurance Requirement IIA Standard 1300 requires both an internal and external quality assurance and improvement program. External assessments (Peer Reviews) need to occur at least every five years. Generally Accepted Government Auditing Standards / Government Accountability Office (GAO) requires an external assessment every three years. Most recently, in December 2018, an external assessment was conducted by the Association of Local Government Auditors (ALGA). Due to COVID-19 Pandemic, the GAO has extended the peer review timeline for any affected audit organizations, for up to two years and three months beyond their review period. A self-assessment is conducted each year. It was last completed in August 2020. 4 Open Issue Follow-Up Status – Aging Report as of April 8, 2021 *1 Eight issues outstanding for more than two years consist of: One issue - Fishing & Commercial Operations – Manual Billing Process at Risk of Error – To be built in house / Commission approved $410,000 additional funding / implementation date, Q4 2021. Seven issues - IT Audits (Security Sensitive) - Exempt from Public Disclosure per RCW 42.56.420 – Issue Not Discussed in Public Session. They are: Disaster Recovery Capability (1), AV/M IT Change & Patch Management (1), AV/M Facilities & Infrastructure Data Centers (3), and Security of Personal Identifiable Information (2). *2 Four IT issues do not have Target Dates and are not included in this chart. These issues are in the process of being addressed, however, they are more than two years past the Report Date. See Appendix A for a detailed listing of outstanding issues aging as of April 8, 2021. 5 Approved 2021 Audit Plan Limited Contract Compliance Operational Information Technology • Rasier, LLC • Rent & Concession Deferral Recovery • T2 Airport Garage Parking System • Lyft • Capitalization of Assets Replacement1 • Lenlyn Limited1 • Art Program • Malware Defenses – Aviation • Seattle-Tacoma Int’l Limousine • Noise Monitor Data Accuracy Maintenance Association (STILA) • South King County Fund • Continuous Vulnerability Management • Dilettante Chocolate, INC • Biometrics1 • Fruit & Flower, LLC (DBA Floret • Payment Card Industry (PCI) - Internal Authority) Capital Security Assessor • Central Terminal Infrastructure Upgrade (Construction and Closeout Phases) • North Terminal Utilities Upgrade – Phase 11 • Checked Baggage Recap/Optimization - Phase II • Restroom Renovations Phase 3 Prototype 1 Moved to 2021 audit plan from 2020 due to COVID-19 Pandemic. 6 Contingency Audits - if resources exist, at Internal Audit Director’s discretion, these audits will be moved to the 2021 Audit Plan. Limited Contract Compliance Operational Information Technology • Dufry – Seattle JV • Outside Services (Professional)1 • Data Recovery Capabilities • Architectural & Engineering Consultant • Wireless Access Control Rates Follow-Up Audit Capital • North Satellite (NSAT) Renovation & Expansion • International Arrivals Facility 1 Moved to 2021 audit plan from 2020 due to COVID-19 Pandemic. 7 2021 AUDIT PLAN STATUS Audit Title Type Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec Raiser, LLC Contract Compliance Lyft Contract Compliance Lenlyn Limited1 Contract Compliance Seattle-Tacoma International Limousine Association (STILA) Contract Compliance Dilettante Chocolate, INC Contract Compliance Fruit & Flower, LLC (DBA Floret Authority) Contract Compliance Rent & Concession Deferral Recovery Operational Capitalization of Assets Operational Art Program Operational Noise Monitor Data Accuracy Operational South king County Fund Operational Central Terminal Infrastructure Upgrade (Construction and Closeout Phases) Operational - Capital Restroom Renovations Phase 3 Prototype Operational - Capital Checked Baggage Recap/Optimization - Phase II Operational - Capital North Terminal Utilities Upgrade - Phase 11 Operational - Capital T2 Airport Garage Parking System Replacement1 IT Malware Defenses - Aviation Maintenance IT Continuous Vulnerability Management IT Biometrics1 IT Payment Card Industry (PCI) - Internal Security Assessor IT Complete KEY In Process Not Started Note 1: Moved to 2021 audit plan from 2020 due to COVID-19 Pandemic. 8 Audits Completed: 1) Noise Monitor Data Accuracy 2) South King County Fund 3) Central Terminal Infrastructure Upgrade (Construction and Closeout Phases) 4) Malware Defenses – Aviation Maintenance* 5) Seattle-Tacoma International Association (STILA) * Security Sensitive – Exempt from Public Disclosure per RCW 42.56.420 – Report Not Discussed in Public Session. 9 Noise Monitor Data Accuracy The Port owns 24 permanent and 2 portable data monitoring terminals to capture airplane noise. Data from these terminals is provided to a third party, L3Harris, who, among other functions, correlates the information to Seattle-Tacoma International Airport (SEA) flight data. The data is then provided to the Port’s Business Intelligence team, who generates reports for public viewing. 10 Location of 24 permanent noise terminals 11 1) Rating: Medium Internal Audit identified instances where data was missing or appeared to be inconsistent, which indicated that the monitoring terminals were not working as intended or that internal processes did not process the data completely or accurately. This information is provided as a public service and no regulatory requirement exists for inaccurate or incomplete data. However, as a public agency, information that can be relied on should be available regardless of how it is used. 12 Recommendation Management should develop a process to proactively identify and resolve system outages. This process should also include establishing criteria (i.e., frequency of breakdowns, variance analysis) to trigger servicing and replacement decisions, in line with the service response goals outlined in the agreement with L3Harris. 13 Management Response The Noise Programs Office has taken many steps in recent years to provide as much information as possible to the public via our website. This includes (among other items) monthly complaint reports, late night operations information and monthly noise monitor data. It is very important to our team to provide the most complete noise data possible. This audit was a great opportunity to have a team that may not be familiar with noise monitoring systems evaluate our data and processes. This exercise and the auditors’ recommendations have highlighted ways in which we can improve the reliability and completeness of our noise data. As a result, we have put into place measures that will greatly limit the possibility of data gaps and prolonged interruptions in the future. 14 Management Response (continued) - Action Items A system report email to Noise Programs staff now arrives each morning from L3Harris displaying the status and performance of each monitor. This report is reviewed daily by Noise Programs staff to more proactively address any data interruptions. If flight track to noise correlations are missing from a normally busy monitor or if any electrical interruptions are shown, Noise Programs staff will immediately contact L3Harris support to initiate investigation and resolution. L3Harris has also instituted a process for daily internal checks of the monitor system and a more proactive response. We have seen this proactive process come to fruition in recent weeks as we have established our portable noise monitoring program. The Noise Programs staff will work with the Port's Business Intelligence staff to identify ways to improve the transfer of noise data to the external web Tableau site and establish checks for data completeness. As part of the auditor's recommendations, the Tableau site is now being updated to include public messaging on data and system issues. DUE DATE: Immediately (Full response in Audit Report No. 2021-05; Appendix B) 15 South King County Fund Provides resources and support for SEA area communities, specifically benefiting South King County nonprofit organizations that support communities of color and historically marginalized communities through environmental sustainability, small business capacity building, and economic recovery strategies. Established and approved by Port Commission through Motion 2018-14 on November 27, 2018. $10 million budgeted between 2019 and 2023. Motion 2019-10 - Commission retained review and approval authority for proposed projects. 16 1) Rating: Medium The Port’s website states that 10 South King County organizations were recommended to receive funding through the first cycle of the South King County Fund (SKCF) Economic Recovery Grants Program and were approved by Port Commission on December 15, 2020. However, three additional Economic Development projects have been awarded from the SKCF, two* of which did not receive commission approval. * Find Ventures $150,000 and Economic Alliance Snohomish County $50,000. 17 Recommendation Establish ownership of the SKCF under two co-sponsors so it is clear what projects need to be provided to Commission for approval. Aligning project ownership with two executives will facilitate consistent oversight and requirements of the program. This will also assure that approvals are obtained, organizations are selected, and the use of awarded funds are monitored to assure that they are used for the intended purpose. 18 Management Response External Relations (ER) and the Office of Equity, Diversity and Inclusion staff agrees with the report findings. Moving forward, Pearse and Bookda continue as Executive Co-Sponsors of the South King County Fund. This partnership is working well and draws upon the strengths of each department in balancing the ER and Equity goals of the fund. Andy Gregory and Alison Beason continue as Co-Project Managers of the fund with weekly check-ins and clear working agreements. To improve our internal process, the following actions are being adopted: • Budget allocation and tracking for SKCF will be overseen by the Assistant to Sr. Director, ER. Co-Project Managers will approve invoices and track SKCF spending. Invoices will be submitted to SKCFund@portseattle.org , which will be monitored by the Assistant to Sr. Director, ER and Co-Project Managers. • Director, CPO, will be informed of annual funding allocation from SKCF, and be given detailed information for any contract and programs that will spend from it. Procurement checklist type document has been updated to ask for notification of any procurement that will utilize SKCF. • Communications materials will be updated to reflect all program spending from SKCF and Economic Development Department staff will be informed of regular project communications meetings. DUE DATE: Immediately 19 Central Terminal Infrastructure Upgrade (Construction and Closeout Phases) The Central Terminal Infrastructure Upgrade project (CTIUP) provided an additional 10,000 square feet of airport, dining and retail space to the Central Terminal plus associated vertical circulation. CTIUP was audited in two parts: the first audit focused on the bid and design phases. The results of that audit were presented to the Audit Committee in December 2020. This audit focused on the construction and closeout phases. Osborne Construction was awarded the contract for $9.3M. There were $2.9M in executed change orders and potential cost risks, which increased the construction budget to $12.2M. The original expected date of substantial completion was December 26, 2019. The Port approved 278 days that extended substantial completion to September 29, 2020. Substantially completed on December 31, 2020 with physical completion expected in April 2021. 20 1) Rating: High The Port was overbilled approximately $18,181 through Force Account change orders. These were primarily due to incorrect labor hours and billing rates submitted by Osborne and an inadequate review of documentation by the Port. Osborne documentation did not accurately support amounts billed to the Port in all the Force Account change orders we reviewed. Errors were primarily due to Osborne double counting labor hours, days that an employee was not on-site, and overtime billing rates for a salaried employee. Opportunity for Port management to improve the change order review process, and seek and recover any amount due to the Port from overbilling. 21 Difference: Expected Over/(Under) CO CO Purpose Name Issue Description Total Billed Amount Billed 174 North Ceiling Superintendent 12/9/2019- 12/18/2019 Timecard shows 64 hours worked at the $ 9,832.84 $4,458.95 $5,373.89 regular rate. Daily Field Records show 94 hours worked (104 The Port was billed at an overtime hours billed) at overtime rate. 12/18/19 FA field records double rate for a salary employee counted. 174 North Ceiling Carpenter 12/9/2019- 12/18/2019 Timecard shows 21 hours worked. 26 1,733.78 1,400.36 333.42 (Example 1). hours billed 12/9/2019 counted twice (Original signed Daily FA Sheet shows 5 hours while copy has 4 hours). 174 North Ceiling OCC Night Supervision OCC original request- $7,497.67. POS approved $6,700.94, but 7,497.67 6,700.94 796.73 Hours reported on the Daily Force OCC still billed $7,497.67 $ 6,504.04 Account Field Documents were 176 COVID Reimb. COVID 19 Safety Supervisor Worked 4/27 and 5/1 for week ending 5/2/20. Port charged $11,479.20 $8,953.78 $2,525.42 more than actual hours paid by (OCC Emp) entire week. Osborne to their employees. Onsite four hours on 4/27 (per parking receipt). Billed for 8 hours. 176 COVID Reimb. COVID 19 Safety Supervisor Week ending 6/6/20- Worked three days (6/1, 6/2 & 6/3). Port 9,183.36 8,265.02 918.34 (Example 1). (OCC Emp) billed for entire week. 176 COVID Reimb. COVID 19 Safety Supervisor Did not work on July 3- Independence Day holiday. Port billed for 9,183.36 8,724.19 459.17 (OCC Emp) this day. Multiple Daily Force Account Field 176 COVID Reimb. COVID 19 Safety Supervisor Only worked on 7/31 for week ending 8/1/20. Timesheet does not 11,479.20 9,183.36 2,295.84 Documents (12/9/2019 through (OCC Emp) indicate that days were worked on the Project between 7/25 to 7/30. 12/13/2019) appear to be copies 176 COVID Reimb. COVID 19 Safety Supervisor Did not work on CTIUP 9/1 - 9/3 for week ending 9/5/20. Port 10,560.86 8,724.19 1,836.67 (OCC Emp) charged for entire week. with only the Port’s Field Did not work on 9/7, Labor Day. Port billed. $ 8,035.44 Inspector’s original signature (Example 1). 137 HSS Beam OCC Salaried Employee 9/20/2019 & 9/30/2019 - 10/3/2019 timecard shows 40 hours $ 4,686.00 $2,386.60 $ 2,299.40 Install in North worked at the regular rate. Daily Field Records shows 60 hours CT worked at overtime rate. 137 HSS Beam OCC Hourly Employee 9/16/2019- 9/20/2019 Daily Field Records shows 25.5 hours 1,417.04 1,194.76 222.28 Port was billed for days that the Install in North worked at regular rate. 9/20/2019 Daily field records shows 12 COVID-19 supervisor was not CT hours worked, possible overpayment of 4 hours. $ 2,521.68 onsite (Example 2). 155 Scaffolding OCC Hourly Employee 4 hours billed at overtime rate for 10/26/19. Per timesheet did $306.08 $0 $306.08 not work on that day. 155 Scaffolding OCC Salaried Employee 8 hours billed at overtime rate for 10/26/19. Timesheet does not 814.00 0 814.00 indicate time worked. $ 1,120.08 Total $18,181.24 22 Example 1: Multiple Copies of Field Documents, Hours Billed Different than Paid, Port Billed Overtime Rates 23 Example 2: Port Billed for Time Not Worked 24 2) Rating: Medium Osborne did not meet critical milestones which resulted in the overall Project not being completed on time and the Port incurred additional costs to oversee the Project. Four critical milestones needed to be substantially complete by specific dates for the Project to remain on schedule. If Osborne failed to meet those milestones, the Contract provided the Port the ability to assess liquidated damages (LDs). When Milestones were not met, instead of assessing LDs, the Port issued Letters of Forbearance (LOFs). These letters provided Osborne additional time to complete a Milestone and submit proper documentation for justification. In all four Milestones, Osborne did not fully comply with the LOFs, by either not completing a particular Milestone by the forbearance date, and/or submitting proper documentation. 25 Issue 2: Critical Milestones (continued) As of the report date, potential LDs amounted to approximately $908k. Construction Management is currently reviewing documentation and will likely excuse days for each Milestone. LDs will potentially be decreased or eliminated based on the results of their review. Reconciling post project (example: two years after the completion of Milestone 1), potential exists that reliance will be placed, primarily on information provided by Osborne, and that some of the excused days would not have been approved during the Project. If the Port enforced critical milestone dates, or the requirements of the LOFs during the Project, Osborne may have been more diligent in completing the milestones, and ultimately the Project sooner, which would have resulted in a lower cost to the Port. 26 Management Response – Issue 1 Key points from management’s response to the audit findings: The team agrees with Internal Audit’s recommendations. While we exercised due diligence in our oversight of the contractor’s change order documentation, our current procedures are based on reviewing contractor’s submitted records. The examples provided have identified what appears to be contractor submitting incorrect information for cost reimbursement, resulting in the Port overpaying for work not performed as well as potential underpayment for several construction workers performing overtime work. The team will review our overall management of Force Account change orders and make revisions regarding salaried versus hourly workers. The team will investigate any overpayments made to the contractor and issue a deductive change order to correct this issue. In addition, the team will investigate and ensure that the contractor pays the hourly workers any backpay that is required by law. The team will reinforce, with our contractors and at the next Port of Seattle/Association of General Contractor’s Best Practices committee meeting, the importance of submitting factually correct records and proper payment of wages for hourly construction workers. DUE DATE: 6/30/2021 Management will discuss in detail. (Full response in Audit Report No. 2021-03) 27 Management Response – Issue 2 Key points from management’s response to the audit findings: The team agrees that reconciliation of actual milestone completion dates to the contract milestone completion dates is required and the contractor will be assessed liquidated damages for all unexcused delays to interim milestones, substantial completion and physical completion dates. The team agrees that management of milestones should be addressed in a timely manner during construction as required by our standard operating procedures. Management will reinforce with staff and provide a higher level of oversight to ensure staff understands the importance of timely actions related to schedule management and milestones. The team will also reinforce with the contractors the importance of timely submissions of documentation for schedule delays. DUE DATE: 6/30/2021 Management will discuss in detail. (Full response in Audit Report No. 2021-03) 28 Seattle-Tacoma International Limousine Association (STILA) Lease Agreement (Agreement) entered in March 2011 to allow STILA for the exclusive right to provide On-call Limousine service from SEA. Agreement term expired in February 2016; since operated in a month-to-month arrangement. Due to COVID-19 pandemic, STILA was given MAG deferral for April 2020 through July 2020, with repayment plans to follow without accrued interest. STILA was unable to make Minimum Annual Guarantee (MAG) payments for August 2020 through December 2020. STILA ceased operations in October 2020. In December 2020, STILA officially notified the Port of contract termination as of December 2020. STILA filed for Chapter 7 Bankruptcy on February 17, 2021. Agreement Year Additional Per Trip (March – February) Trip Counts MAG Fees Total Rent 2017 70,861 $732,000 $131,444 $863,444 2018 69,007 $732,000 $124,028 $856,028 2019 65,348 $732,000 $109,392 $841,392 2020* 1,917 $61,000* $0** $61,000 Source: STILA Monthly Trip Counts Reports, PeopleSoft Financials, and AFR Concession documents. *March 2020 – December 2020 (contract terminated December 31, 2020), STILA did not pay the required MAG for August through December of 2020. **March 2020 – December 2020, Additional Per Trip Fees were not incurred as trip counts did not reach the 38,000 thresholds set forth by the Lease Agreement. 29 1) Rating: Medium STILA did not maintain the daily activity records, as required by the Agreement, which resulted in a scope limitation. Accordingly, Internal Audit was unable to obtain sufficient and appropriate audit evidence to provide reasonable assurance that the additional per trip fees, billed solely on STILA self-reported trip counts, were accurate and complete. As an additional procedure, Internal Audit compared STILA’s self-reported monthly trip counts to Automatic Vehicle Identification (AVI) system trip data and noted the following: 30 Issue 1: Need for Strengthened Monitoring Controls (Continued) AVI trip count data generally shows variances with STILA reported monthly trip counts to the Port, as it captures, not only on-call limousine service provided under STILA operations, but also pre-arranged limousine services provided by certain independent operators that belong to STILA. For March 2020 through December 2020, STILA reported trip counts were less than the AVI data (21.1% at aggregate level). This could potentially be due to STILA operators providing more pre-arranged limousine trips. However, we were not able to verify this since STILA was unable to provide us with any records. Regular monitoring and reconciliation of variances between the STILA self- reported monthly counts and AVI trip data had not formally been established. 31 Recommendation - For broader consideration for the AVI System and for Ground Transportation as a whole. Strengthen monitoring controls by: 1. Formalize the review of supporting documents; such as, daily activity records, for self-reported monthly counts for accuracy and completeness. 2. Formalize and regularly review and reconcile variances beyond acceptable thresholds, between self-reported monthly counts and AVI trip data. 32 2) Rating: Low Due to a significant decrease in ridership caused by the COVID-19 Pandemic, STILA was unable to make its Minimum Annual Guarantee (MAG) payments after the MAG deferral ended on July 31, 2020. This resulted in approximately $157,284 owed to the Port, which will be covered by STILA’s surety. Description Month Amount Deferred April - July 2020 $ 51,425.73* Delinquent August - December 2020 $ 101,410.06* Late Fees & Interest Charges August - December 2020 $ 4,448.18 Total Due to the Port $ 157,283.97 Diff. (To be refunded to STILA) $ 27,585.88 Surety on Hand $ 184,869.85 Source: PeopleSoft Financials and AFR outstanding balance calculation spreadsheet by the Aviation Property Manager. *Adjusted based on declined enplanement passenger data for each month per the Lease Agreement Section 7.D. 33 Recommendation As planned, in consultation with the Port’s Legal Department, seek and recover the total outstanding balance of $157,284 (estimate), utilizing the rent security on hand. 34 Management Response – Issue 1 1. Internal Audit recommends that Ground Transportation strengthen monitoring controls by reviewing on-demand limousine records that support self-reported monthly counts. Since STILA is no longer serving SEA, Commercial Management will revise future Port contracts to ensure that any new on-demand limousine contract(s) will include improved operational and accounting controls for both the Operator and the Port. This will include, but is not limited to, monitoring and reviewing daily and monthly trip counts and ensuring accuracy. 35 Management Response – Issue 1 (continued) 2. Internal Audit recommends that Landside Operations formalize a regular review and reconciliation of variances (between the self-reported monthly activity and AVI trip activity) that are beyond acceptable thresholds. While, on the surface, the variance of 21% may seem high, we believe it is rational due to the sudden decline of STILA’s on-demand business and vehicles also being used for prearranged transportation, which were not included in scope of this audit. The Port will evaluate whether allowing an operator to use the same AVI tag for two different types of operations should be sustained in the future. Whether we used STILA’s monthly reported totals or the AVI tags, in no case did STILA come close to the 38,000 trips that would result in additional pre-trip charges in 2020. Ground Transportation has traditionally and consistently reviewed the variance between STILA’s self-reported and monthly activity reports and the AVI system. In the future, we will identify an appropriate Port of Seattle oversight partner for reconciling on-demand limousine services. DUE DATE: N/A 36 Management Response – Issue 2 Aviation Commercial Management staff will continue to work with the Port’s Accounting and Legal departments to complete the closeout of the agreement and recover the outstanding balance owed to the Port. As noted in this report, the Port currently maintains a cash security deposit in excess of the total amount due. However, the Port was made aware that STILA has filed for Chapter 7 bankruptcy and we are actively working with Port Legal to ensure our ability to complete the agreement close-out process, including the application of available security, is preserved. DUE DATE: 3/31/2021 37 Appendix A – Aging of Outstanding Issues as of April 8, 2021 38 Appendix A – Aging of Outstanding Issues as of April 8, 2021 Operational, Capital, Information Technology, and Limited Contract Compliance Audits Months/Years Months/Years Days Outstanding Outstanding Days Outstanding Outstanding Type Audit Description Rating Report Date Target Date (from Report Date) (from Report Date) (from Target Date) (from Target Date) Operational Audit Fishing & Commercial Operations Maritime Manual Billing Process at risk of error High 2/23/2018 12/31/2021 1140 More than 2 years -267 Not Due IT Audit AV/M Facility & Infrastructure Data Centers Security Sensitive High 12/4/2018 No date supplied 856 More than 2 years N/A N/A IT Audit AV/M Facility & Infrastructure Data Centers Security Sensitive High 12/4/2018 No date supplied 856 More than 2 years N/A N/A IT Audit HIPAA Security Security Sensitive High 9/4/2019 7/31/2020 582 1-2 years 251 6-12 months IT Audit HIPAA Security Security Sensitive High 9/4/2019 7/31/2020 582 1-2 years 251 6-12 months Operational Audit Architecture & Engineering Determine fair and reasonable High 12/9/2019 6/30/2020 486 1-2 years 282 6-12 months Operational Audit Architecture & Engineering Management review over max High 12/9/2019 6/30/2020 486 1-2 years 282 6-12 months Operational Audit Architecture & Engineering Contract accuracy High 12/9/2019 6/30/2020 486 1-2 years 282 6-12 months Operational Audit Ground Transportation - Taxicabs Reconciliation process High 12/1/2020 12/31/2020 128 0-6 months 98 0-6 months Capital Audit Central Terminal Infrastructure Upgrade (Construction & Closeout) Overbilling by contractor High 3/24/2021 6/30/2021 15 0-6 months -83 Not Due IT Audit Disaster Recovery Capability Security Sensitive Medium 11/29/2017 No date supplied 1226 More than 2 years N/A N/A IT Audit AV/M IT Change and Patch Management Security Sensitive Medium 12/4/2018 6/30/2019 856 More than 2 years 648 1-2 years IT Audit AV/M Facility & Infrastructure Data Centers Security Sensitive Medium 12/4/2018 No date supplied 856 More than 2 years N/A N/A IT Audit Security of Personal Identifiable Information Security Sensitive Medium 2/26/2019 12/31/2019 772 More than 2 years 464 1-2 years IT Audit Security of Personal Identifiable Information Security Sensitive Medium 2/26/2019 3/31/2020 772 More than 2 years 373 1-2 years Operational Audit Marine Maintenance Shop Keys and badges tracking Medium 6/14/2019 12/31/2023 664 1-2 years -997 Not Due Operational Audit Marine Maintenance Shop Fleet and fuel internal controls Medium 6/14/2019 12/31/2023 664 1-2 years -997 Not Due IT Audit HIPAA Security Security Sensitive Medium 9/4/2019 7/31/2020 582 1-2 years 251 6-12 months IT Audit HIPAA Security Security Sensitive Medium 9/4/2019 7/31/2020 582 1-2 years 251 6-12 months IT Audit Closed Network System Security Security Sensitive Medium 9/5/2019 3/31/2020 581 1-2 years 373 1-2 years IT Audit Closed Network System Security Security Sensitive Medium 9/5/2019 3/31/2020 581 1-2 years 373 1-2 years IT Audit Closed Network System Security Security Sensitive Medium 9/5/2019 6/30/2020 581 1-2 years 282 6-12 months IT Audit Inventory and Control of Hardware Assets Security Sensitive Medium 11/12/2019 6/30/2023 513 1-2 years -813 Not Due Operational Audit Architecture & Engineering Governance Medium 12/9/2019 6/30/2020 486 1-2 years 282 6-12 months IT Audit Network Password Management Security Sensitive Medium 3/20/2020 12/31/2022 384 1-2 years -632 Not Due IT Audit Network Password Management Security Sensitive Medium 3/20/2020 9/30/2020 384 1-2 years 190 6-12 months IT Audit Network Password Management Security Sensitive Medium 3/20/2020 12/31/2020 384 1-2 years 98 0-6 months IT Audit Secure Configuration for Hardware and Software on Security Sensitive Medium 8/21/2020 12/31/2021 230 6-12 months -267 Not Due Mobile Devices, Laptops, Workstations and Servers IT Audit Secure Configuration for Hardware and Software on Security Sensitive Medium 8/21/2020 12/31/2021 230 6-12 months -267 Not Due Mobile Devices, Laptops, Workstations and Servers IT Audit Malware Defenses Security Sensitive Medium 9/4/2020 6/30/2021 216 6-12 months -83 Not Due Capital Audit AOA Perimeter Fence Liquidated damages Medium 9/8/2020 12/31/2020 212 6-12 months 98 0-6 months Lease and Concession Audit Concourse Concessions LLC RE-2 policy review Medium 9/10/2020 12/31/2020 210 6-12 months 98 0-6 months IT Audit Inventory and Control of Software Assets Security Sensitive Medium 11/24/2020 12/31/2021 135 0-6 months -267 Not Due IT Audit Inventory and Control of Software Assets Security Sensitive Medium 11/24/2020 12/31/2021 135 0-6 months -267 Not Due IT Audit Inventory and Control of Software Assets Security Sensitive Medium 11/24/2020 12/31/2021 135 0-6 months -267 Not Due IT Audit Malware Defenses - Aviation Maintenance Security Sensitive Medium 3/17/2021 12/31/2022 22 0-6 months -632 Not Due IT Audit Malware Defenses - Aviation Maintenance Security Sensitive Medium 3/17/2021 6/30/2021 22 0-6 months -83 Not Due Capital Audit Central Terminal Infrastructure Upgrade (Construction & Closeout) Critical milestones not met Medium 3/24/2021 6/30/2021 15 0-6 months -83 Not Due Lease and Concession Audit Seattle-Tacoma International Limousine Association (STILA) MAG payments Low 3/18/2021 3/31/2021 21 0-6 months 8 0-6 months 39
Limitations of Translatable Documents
PDF files are created with text and images are placed at an exact position on a page of a fixed size.
Web pages are fluid in nature, and the exact positioning of PDF text creates presentation problems.
PDFs that are full page graphics, or scanned pages are generally unable to be made accessible, In these cases, viewing whatever plain text could be extracted is the only alternative.