Laserfiche WebLink
Principle 17 — Evaluate Issues and Remediate Deficiencies <br />17.01 Management should remediate identified internal control deficiencies on a timely <br />basis... <br />Evaluation of Issues <br />17.05 Management evaluates and documents internal control issues and determines <br />appropriate corrective actions for internal control deficiencies on a timely basis. <br />Management evaluates issues identified through monitoring activities or reported by <br />personnel to determine whether any of the issues rise to the level of an internal control <br />deficiency. Internal control deficiencies require further evaluation and remediation by <br />management. An internal control deficiency can be in the design, implementation, or <br />operating effectiveness of the internal control and its related process. Management <br />determines from the type of internal control deficiency the appropriate corrective actions <br />to remediate the internal control deficiency on a timely basis. Management assigns <br />responsibility and delegates authority to remediate the internal control deficiency. <br />Corrective Actions <br />17.06 Management completes and documents corrective actions to remediate internal <br />control deficiencies on a timely basis. These corrective actions include resolution of audit <br />findings. Depending on the nature of the deficiency, either the oversight body or <br />management oversees the prompt remediation of deficiencies by communicating the <br />corrective actions to the appropriate level of the organizational structure and delegating <br />authority for completing corrective actions to appropriate personnel. The audit resolution <br />process begins when audit or other review results are reported to management, and is <br />completed only after action has been taken that (1) corrects identified deficiencies, (2) <br />produces improvements, or (3) demonstrates that the findings and recommendations do <br />not warrant management action. Management, with oversight from the oversight body, <br />monitors the status of remediation efforts so that they are completed on a timely basis. <br />Government Finance Officers Association (GFOA) provides best practices for documenting <br />accounting policies and procedures: <br />Communication is an essential component of a comprehensive framework of internal <br />controls. One method of communication that is particularly effective for controls over <br />accounting and financial reporting is the formal documentation of accounting policies <br />and procedures. A well-designed and properly maintained system of documenting <br />accounting policies and procedures enhances both accountability and consistency. The <br />resulting documentation can also serve as a useful training tool for staff. <br />Recommendation: <br />Every government should document its accounting policies and procedures. <br />Traditionally, such documentation has taken the form of an accounting policies and <br />DWS Cash Receipts Audit Criteria 121 <br />