9 melinda cash investment ic sog new format · relevant principles be present and functioning...
TRANSCRIPT
![Page 1: 9 Melinda Cash Investment IC SOG new format · relevant principles be present and functioning (principles are new) ... •Operations Objective – related to the effectiveness and](https://reader036.vdocument.in/reader036/viewer/2022062908/5ac339ae7f8b9a2b5c8baade/html5/thumbnails/1.jpg)
10/20/17
1
InternalControlMelindaAndrewsOctober2017
State and Local Government Finance Division
Law
•WhoseResponsibleforInternalControls?
• DoesanyoneworkinanorganizationweretheFinanceOfficerdoesnotplayaleadroleinInternalControls?
![Page 2: 9 Melinda Cash Investment IC SOG new format · relevant principles be present and functioning (principles are new) ... •Operations Objective – related to the effectiveness and](https://reader036.vdocument.in/reader036/viewer/2022062908/5ac339ae7f8b9a2b5c8baade/html5/thumbnails/2.jpg)
10/20/17
2
State and Local Government Finance Division
ReporttotheNationsonOccupationalFraudandAbuse– 2016GlobalFraudStudy• Analyzed2,410occupationalfraudcasesthatcausedatotallossofmorethan
$6.3Billion
• Medianlossfromasinglecaseofoccupationalfraudwas$150,000
• 23%ofoccupationalfraudresultedinalossofatleast$1million
• IfyoutakemedianlossbyregiontheUSwassecondlowestwith$120,000.MiddleEastandNorthAfricahadthehighestmedianlosseswith$275,000
State and Local Government Finance Division
Characteristicsofthetypicaloccupationalfraudster
![Page 3: 9 Melinda Cash Investment IC SOG new format · relevant principles be present and functioning (principles are new) ... •Operations Objective – related to the effectiveness and](https://reader036.vdocument.in/reader036/viewer/2022062908/5ac339ae7f8b9a2b5c8baade/html5/thumbnails/3.jpg)
10/20/17
3
FraudbyIndustry
State and Local Government Finance Division
TypeofOccupationalFraudforUnitedStates
![Page 4: 9 Melinda Cash Investment IC SOG new format · relevant principles be present and functioning (principles are new) ... •Operations Objective – related to the effectiveness and](https://reader036.vdocument.in/reader036/viewer/2022062908/5ac339ae7f8b9a2b5c8baade/html5/thumbnails/4.jpg)
10/20/17
4
State and Local Government Finance Division
InitialDetectionofFrauds
State and Local Government Finance Division
CasesReferredtoLawEnforcement
![Page 5: 9 Melinda Cash Investment IC SOG new format · relevant principles be present and functioning (principles are new) ... •Operations Objective – related to the effectiveness and](https://reader036.vdocument.in/reader036/viewer/2022062908/5ac339ae7f8b9a2b5c8baade/html5/thumbnails/5.jpg)
10/20/17
5
State and Local Government Finance Division
ResultsofCasesReferredtoLawEnforcement
State and Local Government Finance Division
![Page 6: 9 Melinda Cash Investment IC SOG new format · relevant principles be present and functioning (principles are new) ... •Operations Objective – related to the effectiveness and](https://reader036.vdocument.in/reader036/viewer/2022062908/5ac339ae7f8b9a2b5c8baade/html5/thumbnails/6.jpg)
10/20/17
6
State and Local Government Finance Division
State and Local Government Finance Division
SeveralFraudCasesgoingonNowinNC
• RegisterofDeedsCase$2.3millionmissing• EmployeeinSherriffDepartmentincollusionwithpersonrecordingtime
sheetdatainanotherdepartment• ManagerinvestigatedbyFBIforP-cardfraud• FinanceOfficerremoveseverypennyfromallbankaccounts• Boardmember’sdaughterishigherandissuedadebtcard– makingcash
withdrawals
• Wouldestimatethereareatleast10-20fraudsayearinlocalgovernments
![Page 7: 9 Melinda Cash Investment IC SOG new format · relevant principles be present and functioning (principles are new) ... •Operations Objective – related to the effectiveness and](https://reader036.vdocument.in/reader036/viewer/2022062908/5ac339ae7f8b9a2b5c8baade/html5/thumbnails/7.jpg)
10/20/17
7
State and Local Government Finance Division
WhyDoWeNeedInternalControls?
• AUnitofGovernmentinNChad$300,000takenusingon-linebanking- unitsbankingID,passcodesanddigitalcertificatewereused
• Cashwastakenbyapersoncollectingcash– personissuedreceiptfromreceiptbooktheyboughtatalocalstore
• Personcheckingreceiptnumberingdidn’tfullyunderstandwhattheyweredoing
• Cashtakenfromsafe– safewasnotlocked– itwasn’tconvenienttolocksafe
State and Local Government Finance Division
WhydoWeNeedInternalControls?
• BaringsBankFailurein1995• Britain’soldestMercantileBank• Napoleonicwars,theLouisianapurchase,andtheErieCanal.
BaringswastheQueen'sbank• OnePersonbroughtitdown
• CyberAttackersEmptyBusinessAccountsinMinutes• OfficeofInspectorGeneralrecoveredmorethan$2.4Mduetofuel
fraud
![Page 8: 9 Melinda Cash Investment IC SOG new format · relevant principles be present and functioning (principles are new) ... •Operations Objective – related to the effectiveness and](https://reader036.vdocument.in/reader036/viewer/2022062908/5ac339ae7f8b9a2b5c8baade/html5/thumbnails/8.jpg)
10/20/17
8
State and Local Government Finance Division
CCOOSSOO–– CCoommmmiitttteeeeOOffSSppoonnssoorriinnggOOrrggaanniizzaattiioonnss• 2013– updatedthe1992internalcontrolframework
• Evolutionarynotrevolutionary
• Effectiveinternalcontrolsrequiresthefivecomponentsand17relevantprinciplesbepresentandfunctioning(principlesarenew)
State and Local Government Finance Division
InternalControlDefinition
“process,effectedbyanentity’sboardofdirectors,management,andotherpersonnel,designedtoprovidereasonableassuranceregardingtheachievementofobjectivesrelatingtooperations,reporting,andcompliance.”
![Page 9: 9 Melinda Cash Investment IC SOG new format · relevant principles be present and functioning (principles are new) ... •Operations Objective – related to the effectiveness and](https://reader036.vdocument.in/reader036/viewer/2022062908/5ac339ae7f8b9a2b5c8baade/html5/thumbnails/9.jpg)
10/20/17
9
State and Local Government Finance Division
ThreeObjectives- COSO
• OperationsObjective– relatedtotheeffectivenessandefficiencyoftheentity'soperation,includingoperationalandfinancialperformancegoals,andsafeguardingassetsagainstloss.
• ReportingObjective- relatedtointernalandexternalfinancialandnonfinancialreportingtostakeholders,whichwouldencompassreliability,timeliness,transparency,orothertermsasestablishedbyregulators,standardsetter,ortheentity'spolicies.
• ComplianceObjectives- relatedtoadheringtolawsandregulationsthattheentitymustfollow.
State and Local Government Finance Division
FiveComponentsofCOSO
1. ControlEnvironment– setofstandards,processesandstructuresthatprovidethebasisforcarryingoutinternalcontrolacrosstheorganization• Commitmenttointegrityandethicalvalues• Bd.OfDirectorsexercisesoversightindevelopmentandperformanceofIC• Mgmt.establisheswithboardoversight,structures,reportinglinesand
appropriateauthorities• Commitmenttoattract,develop,andretaincompetentindividuals• Holdsindividualsaccountable
![Page 10: 9 Melinda Cash Investment IC SOG new format · relevant principles be present and functioning (principles are new) ... •Operations Objective – related to the effectiveness and](https://reader036.vdocument.in/reader036/viewer/2022062908/5ac339ae7f8b9a2b5c8baade/html5/thumbnails/10.jpg)
10/20/17
10
State and Local Government Finance Division
FiveComponentsofCOSO
2. RiskAssessment– involvesdynamicanditerativeprocessforidentifyingandanalyzingriskstoachievingtheentity’sobjectives,formingabasisfordetermininghowriskshouldbemanaged.Managementconsiderspossiblechangesintheexternalenvironmentandwithinitsownbusinessmodelthatmayimpedeitsabilitytoachieveitsobjectives.• Clearobjectives• Identifiesrisktoachievementofobjectives,analyzesrisk,howtheyshouldbe
managed• Potentialforfraud• IdentifiesandassesseschangesthatcouldimpactsystemofIC
State and Local Government Finance Division
FiveComponentsofCOSO
3. ControlActivities- actionsestablishedbypoliciesandprocedurestohelpensuremgmt.’sdirectivestomitigateriskarecarriedout– performedatalllevelsoftheentity,variousstagesofthebusinessprocess,includethetechnologyenvironment.Activitiesarepreventive,detective,includemanualandautomated,authorizations,approvals,verifications,reconciliations,businessreviews,segregationofduties.• Controlactivitiesthatmitigaterisk• Generalcontrolactivitiesovertechnology• Deployscontrolactivitiesthroughpolicy/procedures
![Page 11: 9 Melinda Cash Investment IC SOG new format · relevant principles be present and functioning (principles are new) ... •Operations Objective – related to the effectiveness and](https://reader036.vdocument.in/reader036/viewer/2022062908/5ac339ae7f8b9a2b5c8baade/html5/thumbnails/11.jpg)
10/20/17
11
State and Local Government Finance Division
FiveComponentsofCOSO
4. InformationandCommunication– Informationisnecessaryfortheentitytocarryoutinternalcontrolresponsibilitiesinsupportofachievementofitsobjectives.Communicationoccursbothinternallyandexternallyandprovidestheorganizationwiththeinformationneededtocarryoutday-to-dayinternalcontrolactivities.Communicationenablespersonneltounderstandinternalcontrolresponsibilitiesandtheirimportancetotheachievementofobjectives.• Relevant,qualityinformationisusedtosupportthefunctioningofinternalcontrol• Internalcommunicationsincludingobjectivesandresponsibilitiesofinternal
controlisnecessarytosupportfunctioningInternalcontrols.• Communicationswithexternalpartiesaboutmattersaffectingfunctioningof
internalcontrols
State and Local Government Finance Division
FiveComponentsofCOSO
5. MonitoringActivities– Ongoingevaluationsand/orseparateevaluations,areusedtoascertainwhethereachofthefivecomponentsofinternalcontrolispresentandfunctioning.Findingareevaluatedanddeficienciesarecommunicatedinatimelymanner,withseriousmattersreportedtoseniormanagementandtotheboard.
![Page 12: 9 Melinda Cash Investment IC SOG new format · relevant principles be present and functioning (principles are new) ... •Operations Objective – related to the effectiveness and](https://reader036.vdocument.in/reader036/viewer/2022062908/5ac339ae7f8b9a2b5c8baade/html5/thumbnails/12.jpg)
10/20/17
12
State and Local Government Finance Division
AreasofRisk
• Developingpolicyandproceduresinaconstantlychangingenvironmentbutyourproceduresdonotcontainaprocessforkeepingupwithnewdevelopments• Rapidchangeintechnologymakesthisdifficult
• ChangingAccountingstandards
• Evaluateeachcashcollectionsite• Eachsiteshouldhaveanindependentwaytotietoexpectedrevenue
State and Local Government Finance Division
AreasofRisk
• Fictitiousvendors• Verifynewadds• MakesureA/Pcan’taddvendors• VerifySSNandTINforeverynewvendor
• Makesurepersonsaccountingandreconcilingcashcannotwritejournalentries
• WeallhavetheaccountthatnoonewouldbeabletotelliftherewereafewinappropriateJE’sintheaccount
![Page 13: 9 Melinda Cash Investment IC SOG new format · relevant principles be present and functioning (principles are new) ... •Operations Objective – related to the effectiveness and](https://reader036.vdocument.in/reader036/viewer/2022062908/5ac339ae7f8b9a2b5c8baade/html5/thumbnails/13.jpg)
10/20/17
13
State and Local Government Finance Division
AreasofRisk
• VerytightcontrolsoverACHbankinginformation
• ACHfraudcontrol
• Positivepayforallcheckingaccounts
• Monitorbankaccountsmoreoftenthanjustthemonthlybankrecon
State and Local Government Finance Division
AreasofRisk
• Whatisthestructureforsendingwires/ACH’sinyouroffice• Twopersonsmustapproveatemplate• Templatescangooutwithoneperson• Templateshaveanottoexceedamt.• Freeformwiresrequiretwoindividuals
• Whatkindofsecuritydoesyoubankhaveovertransactions
![Page 14: 9 Melinda Cash Investment IC SOG new format · relevant principles be present and functioning (principles are new) ... •Operations Objective – related to the effectiveness and](https://reader036.vdocument.in/reader036/viewer/2022062908/5ac339ae7f8b9a2b5c8baade/html5/thumbnails/14.jpg)
10/20/17
14
State and Local Government Finance Division
AreasofRisk
• ContractVendors– internetprovidersforcashcollection– PCI
• Whenandifyouchangebankscouldyoucontactalltheinstitutionsthatdepositmoneyintoyourbankandnotifythemofthebankchange• Stealingfundselectronically• Becausetimeisoftheessenceinbeingsuccessfulingettingbackfundsstolen
electronically,doweneedtohavepersonreviewallnon-checkdisbursementsbeforetheendofeachday?
State and Local Government Finance Division
WhatCanIDo?
• Hireinternalauditstafforperformthefunctionwithexistingstaff
• HotLine-MeetwithfinancialstaffallovertheCountytoinformthemofanumbertocalltoreportanythingtheyarenotcomfortablewith.Don’thavetoleaveyourname.
• Meetwithstafftoevaluatethegreatestareasofriskinyourenvironment
• ChargeallFinancestafftoberesponsibleforinternalcontrol– putontheirworkplans
![Page 15: 9 Melinda Cash Investment IC SOG new format · relevant principles be present and functioning (principles are new) ... •Operations Objective – related to the effectiveness and](https://reader036.vdocument.in/reader036/viewer/2022062908/5ac339ae7f8b9a2b5c8baade/html5/thumbnails/15.jpg)
10/20/17
15
State and Local Government Finance Division
WhatCanIDo?
• Beforeanynewprocessisputintoplaceevaluateinternalcontrols,documentcontrolsandtrain
• Usetokensinsteadofdigitcertificatesforon-linebanking
• Don’tletemployeesperformon-linebankingfromhomeusingtheirpersonalPC’s
• LetthemVPN(VirtualPrivateNetwork)usingworkPCs
State and Local Government Finance Division
WhatCanIDo?• EmbraceyourredflagrulesandPCIcompliance– makethisamanagementissuenotafinanceissue.–
InvolveIT,Attorney,Depts.
• HaveDepartmentHeadsignaninternalcontrolplanfortheirdepartmentandmakethemnameapersonwhoisresponsibleforensuringitisfollowed
• HaveInternalAuditreviewcompliancewithinternalcontrolplan
• Banksnowrequiringthatonlinebankingtransactionsmustuseaseparatemachinethathaslimitedaccess
• EMV(chiptechnology)requiredasof10/1/2015
• Unitofgovernmentcannotactonchangeinpaymentinformationfromavendorwithoutcallingthevendortoverifythechange.
![Page 16: 9 Melinda Cash Investment IC SOG new format · relevant principles be present and functioning (principles are new) ... •Operations Objective – related to the effectiveness and](https://reader036.vdocument.in/reader036/viewer/2022062908/5ac339ae7f8b9a2b5c8baade/html5/thumbnails/16.jpg)
10/20/17
16
State and Local Government Finance Division
I/CthatAffecttheControlEnvironment
• Makesuremanagementisnotoverridingcontrols• SplitPO’s• Unauthorizedp-cardspurchases• Stickthecontractinthemiddleofthepileandmaybefinancewon’tseeit
• OrganizationalChart– Matrixofauthoritywithbackups
• InternalControlsforSmallUnitsofGovernment– Memo2015-15
• Monthlyreportsshouldbegeneratedandunderstoodbymanagement
State and Local Government Finance Division
I/CthatAffecttheControlEnvironment
• EthicalandProfessionalStandards• Whoteachesethicsinyourunit
• Crosstrainemployeestoperformdutieswhenpersonisout.
• Staffmustbeadequatelytrained
• ListentoAuditorsuggestions
![Page 17: 9 Melinda Cash Investment IC SOG new format · relevant principles be present and functioning (principles are new) ... •Operations Objective – related to the effectiveness and](https://reader036.vdocument.in/reader036/viewer/2022062908/5ac339ae7f8b9a2b5c8baade/html5/thumbnails/17.jpg)
10/20/17
17
State and Local Government Finance Division
I/CinAccountingSystem
• Booksshouldbebalancedandtimely
• Timelybankreconciliations
• Controlaccountsshouldbereconciled
• Accountingproceduresshouldbedocumentedandeasilyaccessedbystaff
• Transactionsshouldbepostedtimely
• Alljournalentriesshouldbeapprovedandexplained- notmadebyanyonethatdealswithcash
• Recordsneedtobeinsecureplace/backups
• WhatareyougoingtodowhenBirdflue/floodingprohibitsyouremployeesfromcomingtowork?
State and Local Government Finance Division
I/CforFederalandStateGrants
• Fundsarerecordedandexpendedincompliancewithprogramrequirements
• Distinguishcontractorsfromsub-recipients
• Monitoringandindirectcost
• Documentthefilingofgrantreports
• Makesureyourreviewingsubrecipientauditreports
• Followingprocurementprocedures
![Page 18: 9 Melinda Cash Investment IC SOG new format · relevant principles be present and functioning (principles are new) ... •Operations Objective – related to the effectiveness and](https://reader036.vdocument.in/reader036/viewer/2022062908/5ac339ae7f8b9a2b5c8baade/html5/thumbnails/18.jpg)
10/20/17
18
State and Local Government Finance Division
I/CforCashReceipts
• Recordcashatearliestpossiblepoint• Cashmustbetiedbacktoanindependentsystem– cashreceiptsaloneisnotthe
bestsystem• Personkeyingaccountingentryshouldnotbepersoncollectingcash• Everyoneinvolvedneedstounderstandwhattheyaredoingandwhy• Whoissuesyourdepositslipsandreceiptbooks?• HaveInternalAuditreviewbanking,cashandinvestmentprocedures
State and Local Government Finance Division
InternalControlsOverInvestments
ForPurposesofthisdiscussion,InvestmentsreferstoinvestmentsotherthanNCCMT,CDARS,Finistar,andICS
MusthaveControls• Investmentpolicy
• Typesofinvestments,lengthoftime,diversifiedportfolio,whattypes/amountofmoneycanbeinvested?• Broker/DealerAgreements
• CanonlysellyoulegalinvestmentsforNClocalgovernmentsandinaccordancewithyourinvestmentpolicy• GetReferencesfromotherNClocalgovernments
• CustodialAgreements– InvestmentsresideintheTrustareaofthebank.• SafekeepingAgreements– Investmentsresideinthecommercialsideofthebank• Seememo2013-03CustodyandProperSafekeepingofLGInvestments onStateTreasurer’sweb
sitehttps://www.nctreasurer.com/slg/Memos/2013-03.pdf
![Page 19: 9 Melinda Cash Investment IC SOG new format · relevant principles be present and functioning (principles are new) ... •Operations Objective – related to the effectiveness and](https://reader036.vdocument.in/reader036/viewer/2022062908/5ac339ae7f8b9a2b5c8baade/html5/thumbnails/19.jpg)
10/20/17
19
State and Local Government Finance Division
InternalControlsoverInvestments
Issues1. GeneralFundoperatingfundbalanceisinvestedin15yearagencies2. Investmentsarebeingheldbyacustodian/safekeepingagentthathasno
signedcontractwithalocalgovernmentunit3. Brokershavesoldinvestmentstolocalgovernmentsthatarenot
authorizedbygeneralstatutes.
ThisallhappenedduringthispastfiscalyearItisnotuncommonforbrokerstoapproachthegoverningboardaboutimprovinginterestearnings
State and Local Government Finance Division
InternalControlsoverInvestments
Beforeyousetupaninvestingprogramyouneedtosetupproperinternalcontrolsovertheinvestmentactivities.ContactBeckyDzingeleskiat919-814-4287.
BecomeamemberoftheNCLocalGovernmentInvestmentAssociation• Theycanprovideyouamentortohelpyousetupyourinvestment
programorhelpyouevaluateasuggestionmadebyabroker.
• http://www.nclgia.org/ReviewtheNCStateTreasurerWebsiteforsamplecashandinvestmentpolicyandbroker/dealerquestionnaire.
![Page 20: 9 Melinda Cash Investment IC SOG new format · relevant principles be present and functioning (principles are new) ... •Operations Objective – related to the effectiveness and](https://reader036.vdocument.in/reader036/viewer/2022062908/5ac339ae7f8b9a2b5c8baade/html5/thumbnails/20.jpg)
10/20/17
20
State and Local Government Finance Division
RedFlagRules
• JointCommitteeoftheOCC,FederalReserveBoard,FDIC,OTS,NCUAandtheFederalTradeCommissionpassedthefinallegislationforSection114oftheFairandAccurateCreditTransactionsAct• Aimedtopreventormitigateidentitytheftassociatedwithcustomeraccounts• Coveraccounts- Apersonalaccountthatinvolvesorisdesignedtopermit
multiplepaymentsortransactions- utilities
State and Local Government Finance Division
RedFlagRules– GuideforBusiness
TheRedFlagsRuletellsyouhowtodevelop,implement,andadministeranidentitytheftpreventionprogram.Aprogrammustincludefourbasicelementsthatcreateaframeworktodealwiththethreatofidentitytheft.
1. Aprogrammustincludereasonablepoliciesandprocedurestoidentifytheredflagsofidentitytheftthatmayoccurinyourday-to-dayoperations.RedFlagsaresuspiciouspatternsorpractices,orspecificactivitiesthatindicatethepossibilityofidentitytheft. Forexample,ifacustomerhastoprovidesomeformofidentificationtoopenanaccountwithyourcompany,anIDthatdoesn’tlookgenuineisa“redflag”foryourbusiness.
![Page 21: 9 Melinda Cash Investment IC SOG new format · relevant principles be present and functioning (principles are new) ... •Operations Objective – related to the effectiveness and](https://reader036.vdocument.in/reader036/viewer/2022062908/5ac339ae7f8b9a2b5c8baade/html5/thumbnails/21.jpg)
10/20/17
21
State and Local Government Finance Division
RedFlagRules– GuideforBusiness
2. Aprogrammustbedesignedtodetecttheredflagsyou’veidentified.IfyouhaveidentifiedfakeIDsasaredflag,forexample,youmusthaveprocedurestodetectpossiblefake,forged,oralteredidentification.
3. Aprogrammustspelloutappropriateactionsyou’lltakewhenyoudetectredflags.
4. Aprogrammustdetailhowyou’llkeepitcurrenttoreflectnewthreats.
RedFlagrulesexpireDecember31,2015– FederalTradeCommissionhasproposalouttoextendforthreemoreyears.CommentperiodclosedOctober19,2015
State and Local Government Finance Division
PaymentCardIndustryDataSecurityStandard– PCIDSS
• ALL companiesthatprocess,storeor transmitcreditcardinformationmaintainasecureenvironment.• https://www.pcisecuritystandards.org/security_standards/pci_dss.sht
ml
• Ifyoualreadydocreditcardbusinessyouareawareoftheserules.IfyouarethinkingaboutacceptingcreditcardsmakesureyouunderstandPCIbeforeyoucommittoanyparticularprocess• IfyouneedtohireaconsultanttohelpyouwithPCIcompliancethe
StatehasCoalFireoncontractatastaterate.
![Page 22: 9 Melinda Cash Investment IC SOG new format · relevant principles be present and functioning (principles are new) ... •Operations Objective – related to the effectiveness and](https://reader036.vdocument.in/reader036/viewer/2022062908/5ac339ae7f8b9a2b5c8baade/html5/thumbnails/22.jpg)
10/20/17
22
State and Local Government Finance Division
RecommendedPractices&Roles
• InternalAudit
• AuditCommittees
• DisasterRecoveryPlan
• AccountingPoliciesandProcedures
State and Local Government Finance Division
Who’sResponsibleforIC?
Management(includesgoverningboard)hastheresponsibilityfortheestablishmentandmaintenanceofadequateinternalcontrols.