The URL can be used to link to this page

Home My WebLink AboutCOM 0931.000 2022-2024County Auditor County of Hawai'i Office of the County Auditor Ph 808.961.8386 County of Hawai'i Office of the County Auditor 120 Pauahi St., 309 Hilo, HI 96720 F 808.961.8905 www.hawaiicounty_gov % June 28, 2024 r Honorable Heather Kimball, Council Chair3 and Members of the Hawaii County Council Hawaii County Council `' r-J 25 Aupuni Street _ s Hilo, Hawaii 96720 - f_ .._ l Dear Chair Kimball and Council Members, In accordance with Hawaii County Charter Section 3-18(d)(2), the Office of the County Auditor's Fiscal Year 2024-25 Annual Audit Plan is attached. This provision requires our office to transmit an annual audit plan to the Hawai'i County Council and the Mayor. Our plan includes the following: • Annual Comprehensive Financial Report for Fiscal Year Ending 2024 • Single Audit of Federal Financial Assistance Programs for Fiscal Year Ending 2024 • Audit of the Financial Statements of the Department of Water Supply for Fiscal Year Ending 2024 • One self -initiated audit • One follow-up audit • Four surprise cash counts • Carryover items, unplanned engagements, and special projects • Consider Council -initiated audits/projects We want to take this opportunity to share our appreciation with the entire organization as we look forward to pursuing the upcoming audit engagements and projects for the County of Hawaii. Respectfully, County Auditor County of Hawaii Ref. To: Hawai'i is an Equal Opportunity Provider and Employer Ref. Date : NIUM 2 8 County of Hawaii Annual Audit Plan Fiscal Year 2024-25 County of Hawaii Office of the County Auditor 120 Pauahi St., 309 Hilo, HI 96720 County of Hawai'i Office of the County Auditor 120 Pauahi St., 309 Hilo, HI 96720 Date: June 28, 2024 To: Honorable Heather Kimball, Council Chair and Members of the Hawaii County Council From: Tyler J. Benner, County Auditor Subject: Annual Audit Plan Fiscal Year 2024-25 Executive Summary Under Hawaii County Charter Section 3-18(d)(2), the Office of the County Auditor respectfully submits its Fiscal Year 2024-25 Annual Audit Plan. The provision requires our office to provide an annual audit plan to the Hawaii County Council and the Mayor. An audit plan identifies specific agencies, departments, divisions, funds, programs, and activities that may be considered for examination to achieve one or more of the audit objectives. After considerable discussion and analysis, we designed the work plan to focus on priorities including data security, public safety, organization alignment, transparency, and program efficacy. Respectfully, 4 X W, f '(WOW ell 9 County Auditor County of Hawaii Cc. Honorable Mitchell D. Roth, Mayor Deanna Sako, Managing Director Jon Henricks, County Clerk 1 Vision Statement Our vision is to enhance County government by leveraging new and emerging technology, evolving the control environment at the speed of business, to provide reasonable assurance that public resources and services are receiving the adequate stewardship they deserve. Mission Statement It is our mission to serve the Council and citizens of Hawaii County by promoting accountability, fiscal integrity, and openness in local government. Through performance and/or financial audits of County agencies and programs, the Office of the County Auditor examines the use of public funds, evaluates operations and activities, and provides findings and recommendations to elected officials and citizens in an objective manner. Our work is intended to assist the County government in its management of public resources, delivery of public services, and stewardship of public trust. Audit Objectives We achieve our mission by pursuing the following audit objectives: • Determine the effectiveness and efficiency of organizations accomplishing their mission and identify cost savings and revenue enhancement opportunities. • Evaluate adequacy and compliance of internal controls, policies and procedures, systems, and processes. • Evaluate proper accounting and safeguarding of County -owned assets. • Cause to conduct reviews of the accuracy of financial and operating transactions. • Confirm compliance with local, state, and federal laws and regulations. • Proactively identify and investigate reported fraud, theft, waste, abuse, etc. and recommend controls to prevent and detect such occurrences. • Determine the effectiveness and efficiency of County programs and resources being utilized. • Follow-up, review, and evaluate previously conducted audits to ensure management actions achieve satisfactory solutions to all significant issues. 2 Fiscal Year 2024-25 Planned Audits (Order yet to be determined) Mandated by Charter ➢ Annual Comprehensive Financial Audit of the County of Hawaii ➢ Single Audit of Federal Financial Assistance Programs ➢ Audit of the Financial Statements of the Department of Water Supply In accordance with Hawaii County Charter Section 10-13, our office will monitor the contract with the external auditor, Accuity LLP, (RFP #4375a), to complete the following: ➢ Conduct audits of the accounts and other evidence of financial transactions of the County of Hawaii for the Fiscal Year Ending June 30, 2024 ➢ Single Audit* of Federal Financial Assistance Programs for Fiscal Year Ended June 30, 2024 ➢ Report for Landfill Financial Assurance; and ➢ Financial Assessment Electronic Submission of Section 8 — Housing Choice vouchers ➢ Financial Audit of the Department of Water Supply for the Fiscal Year Ended June 30, 2024 *Additional programs may be added as determined by the Schedule of Expenditures of Federal Awards (SEFA). 3 Audits In Process The office will complete and publish carryover items from the previous year. ➢ Department of Environmental Management, Abandoned Vehicles ➢ Completed, Management Response Received ➢ Unpublished ➢ Department of Public Works, Highways and Engineering Divisions, Bridges and Culverts ➢ Completed, awaiting Management Response ➢ Unpublished ➢ Department of Public Works, Building Permits ➢ Fieldwork in Progress ➢ Unpublished Additions to the Audit Work Plan We continuously evaluate risk. Risk can be inherent and dynamic and can evolve rapidly. Our audit plan may be modified at any time. Modifications should not be considered a plan failure but should instead reflect the changing environment and the need to adapt to new and unanticipated threats. 4 Self -Initiated Audits Information Technology: Cyber Security Audit (phase 1 of 3) In phase 1, we will evaluate the efficiency and effectiveness of the County of Hawai'i's cybersecurity hygiene by aligning the Center for Internet Security (CIS) version 8 and the National Institute for Standards and Technology with actual practices. We will assess all cybersecurity elements, from asset inventory and control through incident response and recovery, to ensure a robust, compliant, and streamlined cybersecurity posture that mitigates risks and protects critical assets. o k rverworK Infrastructure r Management KS 5 5 •' t L'B W 78 W 88 reness Service Provider ining z Management NI 99 7 t L7 ` I17 t 7 7 I >onse Penetration Testing KS 9 9 5 S�tlS MS 0 5 11112 35 W 55 io NIST Cybersecurity Framework Overview o Ll C1 IDENTIFY PROTECT RESPOND RECOVER Asset Management Awareness Controrf Anomalies and Response Planning Recovery Planning Business Awareness and Events Communications Improvements Ernnronment Training Security Analysis Communications Continuous Governance Data Security Monitoring Mitigation Risk Assessment Info Protection and Improvements • Risk Management i Procedures Detection Process Strategy Maintenance Protective Technology Source: Dell.com 5 Follow -Up Audit Hawaii County Fire Department Performance Audit Follow-up Our audit will follow up on Report No. 2022-02, published March 21, 2022, titled "Hawaii Fire Department Performance Audit," to determine the progress and implementation status of 13 recommendations previously identified. As of June 28, 204, status of recommendations for reports being tracked are as follows: Department /Div Human Resources Subject Matter Hiring Pending Resolved Fully Implemented 0 3 �_ 4 Partially Implemented 0 Not Implemented 0 Not Applicable 0 Follow -Up Conducted? Yes Fire Performance 3 0 0 0 0 0 No Mass Transit Cash Handling 0 28nor 6 6llllllllllllllllllll 0 0 0 Yes Yes Water Supply Cash Handling 0 1 Real Property Tax Collection _11 0 0 0 0 0 No Water Supply Contingency Plans 0 1 2 0 0 0 Yes Housing Housing Credits NEI 7 0 0 0 0 0 No Information Technology Help Desk 6 0 0 0 0 0 No Public Works Contracts and Change Orders 7 0 0 0 0 0 No Police Community Service, Health, Training 5 0 0 0 0 0 No Council -Initiated Audit The office will consider Council -related audits and projects brought forward by resolution. Performance audits approved by Council Resolution and agreed to by the County Auditor. Special Projects (Non -Audit) Grant -In -Aid Remediation tracker Surprise cash counts Tips requiring further research from Fraud and Whistleblower Hotlines 0 Remediation Tracker To increase government transparency and accountability, we have developed a remediation tracker. We continuously track the status of recommendations until implemented or otherwise resolved. 10 97 419 `eta N—te• c' Fecor-^ie-oat o-s Average Days Outstandi^o � wM.,.a �>,.�...: �. +..�.�. ,..•�.....x,<.w.•.<...,..a w.ae.,.n r.�.r<r...ao.v...�..w�.: e.o.d T �x ree vrNr hae < ti<�• >n+etr m. mer b, Mn. i.m.x +n..a. an.m+n<.+.n.n tr m.w..w� t. noaa bn w+n.n �rna� rk nuuroai na.+ • ..ra•a 5 ea enpVn.we a ad+raep bi M /I waamy mmei �<ude.a do l.m `•••••,"• wwn�« n�.-<,�.,..�.ya..�e �x.�e.�.., u+.�wae <dlmmewrwm.w.g �<a,<a o • n � .ee�roe nanr .: y ... �� No.Ye tr:.xeohn+nh aro MortM ie9 owwie< F 71 1 x.1 -1 ,�Sl • wr�.<a. rn-on.vnn ..•.m. eu .�d. w F .nrv.ie.e m . r� .. mpen�w.r ane nrbn .tiuln tr.eem u�ea.<•re�<.•wam M•nx.. .no..r:•.m <m•rynenn~ Response Status by Department Days Outstanding by Department Haws, F. . Deva.i-+e •. Mass Transit nge. 790.00 Average of Dates Set— H.— F- 0". -- - - 613.00 Average of Dates Between Fnar+ce - aeal or. ' Mass TransH 4gency 515.90 waur 5-PP')Average of Dates Between DI1He ut Fousnt Deaxfinmt of H.. 473.00 Average of Dates Between Office or Houvrg Inlo<malPn Technology 384.00 Overage of Dates Between vublic Works P-1, viorhs 324.00 ineormnwn T«b.. Average of Dates Between edKe -W , 5200 Average of Dates Between 7 Next Steps Carryover and new audit engagements will commence as scheduling permits. Completed audits will be shared with those charged with governance, and responsible parties will have the opportunity to provide comments. Completed reports will be transmitted to the County Council and the Mayor and filed with the County Clerk as a public record. We want to take this opportunity to thank the County Council and the Administration for their support. We look forward to conducting our work this coming year. Respectfully, 4L6,f. 660) "W1.9 County Auditor County of Hawaii