Loading...
HomeMy WebLinkAboutFCS-17-007 - 1Q Audit Status ReportStaff Report rR finance and Corporate Services Department www.kitchener.ca REPORT TO: Audit Committee DATE OF MEETING: March 20, 2017 SUBMITTED BY: Corina Tasker, Internal Auditor, 519-741-2200 ext. 7361 PREPARED BY: Corina Tasker, Internal Auditor, 519-741-2200 ext. 7361 WARD(S) INVOLVED: All DATE OF REPORT: March 13, 2017 REPORT NO.: FCS -17-007 SUBJECT: 1st Quarter Audit Status Report RECOMMENDATION: No recommendation required. The following information is being provided as an update and assurance on internal audit matters, in accordance with the Audit Committee Terms of Reference. BACKGROUND: The following report provides a summary of the Internal Audit activities completed during the period of December 2016 to March 2017. The chart below shows the audits contained in this report. The following items are currently in progress and will be brought forward at a future audit committee meeting: • Cyber Security risk assessment and gap analysis • Revenue comprehensive audit • Stores — Tool Crib physical inventory • Aggregates — cost/benefit analysis *** This information is available in accessible formats upon request. *** Please call 519-741-2345 or TTY 1-866-969-9994 for assistance. 2-1 REPORT: 1. Petty Cash — Compliance Audit Completed. March 3, 2017 Background: Employees are empowered to purchase goods and services on behalf of the City of Kitchener in order to perform their jobs. For purchases <$3000 they can do so through using a corporate VISA card if they have one, or by using their own funds and being reimbursed through petty cash (for <$100) or cheque requisition (>$100). For purchases that are reimbursed through petty cash, the employee is to receive oral approval from their supervisor prior to making the purchase. Following the purchase they attach the original receipts to a Petty Cash (PC) voucher with the date of the purchase, business reason for the expense, account to charge and amount. The voucher is then signed by the supervisor who authorizes the purchase. The supervisor should be checking to ensure that the expense is a valid business expense, original receipts are attached, and that no prohibited items have been purchased. The employee takes the signed voucher and receipts to a PC custodian who disburses the cash and signs the PC voucher indicating the cash was given out. The custodians are selected individuals assigned to manage the petty cash for a given area or division. Once the cash is received, the employee also signs the voucher to indicate they received the cash. The custodian then files the voucher and receipts. Once a PC custodian's cash float is diminished to a certain limit, the PC custodian will submit all of the vouchers and receipts with a reconciliation report for review and approval by their supervisor. It is then submitted to Accounting in order for the float to be replenished. Accounting verifies that the vouchers plus the remaining float equal the authorized float amount and then issues a cheque for the difference, charging the accounts indicated on the vouchers. In the past, the internal audit division conducted annual "surprise" cash counts at all City facilities that have petty cash custodians. A checklist was completed for each location to assess if the cash plus receipts equaled the petty cash float amount, whether the safe was locked, whether deposits were current, how many staff have access to the safe and what other assets are kept in the safe. Findings in those annual audits indicated that all cash variances were considered minor and records were generally organized and current. Controls appeared to be sufficient and staff was following established policies. As a result, the frequency of petty cash counts has been moved to bi-annual. Recommendations have been made in past years regarding the physical safety of the cash as well as the accuracy of the reconciliations. A deeper review of cash deposit processes was done in 2014 at all locations in lieu of the cash counts. W 2-2 In 2015, a review of all employee expenses was done, including petty cash. One of the objectives was to test a sample of employee expenses to see if they complied with policy. The hardcopy backup for all 2014 petty cash vouchers for selected petty cash custodians was reviewed and tested against criteria as part of that review. Audit Objectives: To test a sample of 2016 petty cash vouchers for compliance with policy. Methodology: This audit included testing a sample of 2016 petty cash expenses against the following criteria: • Voucher was authorized by the appropriate person, and the custodian and person receiving the cash signed in the appropriate spot on the voucher • Business reason for the expense was provided • No alcohol or tobacco was purchased • No personal items / loans / cashing of personal cheques • Not used to pay a vendor directly • Original receipts attached A random sample of 50% of the petty cash custodians was drawn which equated to 18 of 36 staff. From that sample the reconciliation reports and attached vouchers and receipts were obtained for 12 of the 18 staff. (The remaining 6 staff did not process any petty cash replenishment requests during 2016.) One reconciliation report from each of the 12 staff was reviewed. Within these 12 reconciliation reports, 129 individual petty cash vouchers and associated receipts were reviewed. Findings: The following observations were made: Prohibited Purchases • One instance of payment to a vendor. Accounting informed the employee of the proper process subsequently. • One instance of personal items reimbursed as part of a larger receipt for legitimate business items (item was flagged by employee as personal but not deducted from the total, $1.29 total) • Two instances of alcohol being purchased. However this was for the Market where this is an acceptable purchase for the cooking classes, however it should be done using the corporate VISA card. The control point to ensure all alcohol purchased is actually used at the Market is for the manager to confirm all purchases were added to the inventory tracking sheet when they approve the corporate VISA statement on a monthly basis. The tracking sheet records all purchases and uses of alcohol and should match the physical count of alcohol on hand at any time. While the petty cash reconciliation could also be used for this 3 2-3 purpose, it may not be done monthly if the float has not been depleted. This would make it more difficult to regularly monitor and reconcile the alcohol inventory. Accounting did follow up with staff subsequently to confirm the required alcohol inventory practices were being followed. Staff indicated this was a last minute purchase made by a chef which is why VISA could not have been used. • Five instances of purchases for tools and supplies at Home Depot. While not prohibited, staff should be obtaining these items from the tool crib or stores where possible. Management has been notified. Signatures • 16 instances with no supervisor approval on the vouchers (12% of the sample) 0 7 instances where it was missing 0 9 instances in Golf where their vouchers do not have a place for supervisor signature • 2 instances where the employee receiving the cash did not sign the voucher (1% of the sample) Analysis: The testing for this audit was based on the written petty cash policy as it exists today. Analysis of the requirements in the policy and a risk assessment of the consequences of non-compliance have led to the conclusion that some of these rules within the policy serve no purpose and could be relaxed. Specifically, there is no difference between paying a vendor with petty cash or with a cheque other than the speed at which it can be done. The amounts are under $100 and will always be accompanied by an original receipt. If paying by cash staff must ensure the vendor writes on the receipt that they were paid. With regards to signatures, on further discussion with accounting management it was decided that the most important signature for most petty cash expenses is the management signature on the overall replenishment reconciliation, indicating they approve all of the expenses that were submitted by staff. In addition, the person receiving the cash should sign the individual voucher as proof of receipt. Beyond that, the other signatures on the voucher (custodian and supervisor) are irrelevant and do not increase controls in any way. The process could be streamlined by not requiring these signatures on the vouchers or at least making them optional if the manager chooses. Some managers may still wish to give express approval for each voucher before the cash is given out. However, the dollar values and risk are low. This applies, however, only to divisions which have their own petty cash float. E 2-4 For petty cash floats which can be accessed by multiple divisions, for example the ones managed by staff in Revenue for City Hall staff or at the KOF reception desk for KOF staff, it is important that the appropriate management sign the individual voucher approving the expense for their area. This is because the petty cash custodian and their management have no authority for approving purchases in other divisions. Recommendations: It is recommended that - 1 . hat:1. Accounting update petty cash procedures to indicate that custodian and management signatures on the vouchers are optional for areas with their own petty cash float only and that vendors may be paid with cash as long as the vendor signs the receipt as paid. 2. Accounting add information about the proper petty cash procedures into the upcoming employee expense training program they are developing. Conclusion: The process appears to be working well and controls are strong. There were only two isolated non-compliance with policy as noted above which were caught by Accounting. In general the expenses are not excessive and do not appear to be fraudulent. The main categories of expenses being claimed through petty cash include such things as program or office supplies, meeting expenses (refreshments), or food for programs. The recommended modifications to the policy will streamline the process while maintaining adequate controls. Recommendations from this review have been shared with the Accounting division for action. 2. Integrated Planning Centre of Excellence — Status Update Completed. January 26, 2017 Background: The Integrated Planning Centre of Excellence (COE) was created in 2011 based on consultant recommendations coming from the 2010 Organizational Design Review. The COE was initially established with a 3 year term in order to meet specific short term goals. The timing of the original review coincided with the end of the 3 year term. The objective of the original review was to revisit the goals of creating the COE and determine if they had been met and what should happen in the future. The intended outcome for the review was a recommended path forward regarding which services to provide, how to resource them, and whether the COE should remain a distinct unit or be absorbed into the CAO's department as a core service. Recommendations and decisions from that review resulted in "Integrated Planning" being formalized as a permanent section within the CAO's Department responsible for strategic and business planning, project tracking and reporting, and ownership of project k, 2-5 and change management tools and templates. Other program areas such as risk management, performance management, change management and project management have been either resourced in other areas (such as internal audit) or imbedded throughout the corporation. Audit Objective: In order to hold staff accountable for implementing audit recommendations a status update is conducted at least one year following the completion of the audit. The purpose is to assess the outcome of the audit in terms of which recommendations have been implemented and comment on what the impact to the division has been. This will help determine if a further follow-up or direction to the division is required. Audit Statistics: Date original audit completed January 9, 2015 # of Recommendations 12 # of Recommendations complete 10 # of Recommendations in progress 2 # of Recommendations not started 0 Positive Impacts: • Establishment of Strategic and Business Planning as permanent part of CAO's Department and its substantial advancement over the few years it has existed • Refreshed performance management system introduced • Resource development - list of mentors willing to support and advise others on project management developed • CapaCity courses introduced for project management and change management • Focus on change management for leadership team in leadership training • Service Coordination and Improvement Managers now exist for each department and additional business analysis support realized in INS Unaddressed Recommendations: Project management templates still need to be posted to the intranet. Next Steps: There are no new recommendations in this report and no further follow-up audits will be conducted. Staff and management should continue to work together to address the outstanding recommendations from the original audit. ALIGNMENT WITH CITY OF KITCHENER STRATEGIC PLAN: This report supports the achievement of the city's strategic vision through the delivery of core service. FINANCIAL IMPLICATIONS: There are no financial implications related to this report. no 2-6 COMMUNITY ENGAGEMENT: INFORM — This report has been posted to the City's website with the agenda in advance of the council / committee meeting. ACKNOWLEDGED BY: Dan Chapman, Deputy CAO, Finance and Corporate Services 7 2-% 0 a cc W H Cy a N W 2-8 2-9 I U O U LU Co 4 O E 0 0 r Co ro (1) U 4-J • Co b _r_Ln n� iL I OE U U M ate+ O I • O Co Ln � w I ro 4-0 U ("o L `n bn i Qo > O bn u\> OEM= 2-9 Q V } H H W a 2-10 me .Ln O c Co i Co O O 0 2-11 W U c Co O � O O L- U V0 O 4- 0 Ov •� U O • — - -0 O W :3 U> •U to U ca U V C� i .E 7 � � z me .Ln O c Co i Co O O 0 2-11 V, 2-12 N L � O s i U U S U O _0 U _I_- > =3 V) _0(� O U C— a� u QLo � O � � o � O � U Lr) •ca 0 ,- y_ p p O N •> Q : c a--+ • +-+ • —all E N N �, cn l� U _0 0 E M a -J MEN=• Oy— -0 �' 3: O .0) 00 m `� N O w (1) = rl N oC O U • • • 2-12 buo c . as -J _ O ateJ (i) • — L .� 0 p i 4 i Q 0 CL0 Nbuo QL 4-J • — ca �ca . s N N U .— �` Q \ Q N-0 N L , m Q 3: 0 m m - N 0(1) 0 0 v ' as--+ U \ ateJ 0 ca 0- C: 0 E cam � O 4-J cn L Q • — m -0 b.0 ca 0M 0 c� ?p �'N O " ca sw%m s O - � C:cn � � 0 (1) ca 0 cam �O O � O >°QL�°mzzuz0 . . . . . 2-13 V c Co 0- E O V i O V CO .ca 0 7a Q) U E O U ca a -J co O V N 2 • of 0!11- Ln ca Q Ln E w to C� C�0 .Ln o1j, • A I • Ln O O E I Ln E cr L ca 2-14 c Co MO L � 4-J V O 0- X LU O O CoxLn-- E w V 0- 4-J (1) (1) C6 Q V .:3 CSO 2-15 2-16 2-17 07 O N • ca O w E • n0 W Co L ^UO W • Pei n0 W W E 0 (1)U O MO Co 0L I� AW Co CSO O 2-18 L- 0 O .O � Co O E VE co O V cry 4-J -0 -0 O � O a -J4-0 . OEM 4-0 E un U 4 -OP N O rl rl N O 2-19 a--� _ Ca ) p '>` U -0 :3�_ p C: (n -a) Ca 0-0 E Ul cerin Q in �+j�.j ��� cW Ln ui ate-+ cn iE U � •� �, O — E-0 E'v� E >� m m O ca w 4- E O ca C)� 4-j � � E E ca w 0 +, -0 4-J, Q w ° +� J � - E O O O O O a) 4--+ 4A • Ca N Q C: > L •— U U Q O cnU-r-"> .—a) O cn a) O 4-J � � U tv0 cn , v `� O CL > OV)- Qra U� Q L am- a)C: ca m O ca (1)X Lu ca DC DC ca U U LLv) cn 2-20 0 a� cr a� c� o a� V � � � � O . z 2-21 2-22