HomeMy WebLinkAboutStaff Report 5240
CITY OF PALO ALTO OFFICE OF THE CITY CLERK
November 3, 2014
The Honorable City Council
Palo Alto, California
SECOND READING: Adoption of an Ordinance to Amend Section
2.08.130 of the Palo Alto Municipal Code, Office and Duties of the City
Auditor, to Reflect Changes in Audit Practices and Clarify the
Requirements for Reporting Work Products of the Office of the City
AuditorSecond Reading: Auditor Duties Ordinance (First Reading:
October 6, 2014 Passed: 8-0 KIein absent)
ATTACHMENTS:
Attachment A: Auditor Ordinance (PDF)
Department Head: Donna Grider, City Clerk
Page 2
NOT YET APPROVED
ATTACHMENT A
Ordinance No. ______
Ordinance of the Council of the City of Palo Alto Amending Section 2.08.130
(Office and duties of the city auditor) of the Palo Alto Municipal Code to Reflect
Changes in Auditing Practices and Clarify the Requirements for Reporting Work
Products of the Office of the City Auditor
The Council of the City of Palo Alto does ORDAIN as follows:
SECTION 1. Findings.
A. The 2002, 2003, 2007, and 2011 revisions to the Government Auditing
Standards, issued by the Comptroller General of the United States, United States
Government Accountability Office, have resulted in changes in auditing
practices. These standards, first published in 1972, provide the foundation for
government auditors to lead by example in the areas of independence,
transparency, accountability, and quality throughout the audit process.
B. Changes in the Government Auditing Standards have established a framework
that auditors must use to evaluate whether providing a nonaudit service would
create a threat to auditor independence, either by itself or in aggregate with
other nonaudit services provided, with respect to any audit the office of the city
auditor performs.
C. The office of the city auditor has historically used and referenced only the
Government Auditing Standards it its work. Eliminating the requirement to also
apply the Standards for the Professional Practice of Internal Auditing, established
by the Institute of Internal Auditors, will not reduce the quality or credibility of
the work of the office of the city auditor.
D. Clarification is needed regarding which council committees should receive
reports issued by the office of the city auditor.
SECTION 2. Section 2.08.130 of Chapter 2.08 of Title 2 of the Palo Alto Municipal
Code is hereby amended to read as follows:
2.08.130 Office and duties of the city auditor.
(a) The office of the city auditor shall be under the direction of the city auditor who shall be
accountable to the city council. The city auditor shall:
(1) Be knowledgeable in operational and financialconducting performance auditsing under
Government Auditing Standards, as established by the Comptroller General of the United
States; public administration,; public policy; and public financial and fiscal practices;
Attachment A
NOT YET APPROVED
(2) Be a licensed certified public accountant (CPA) or certified internal auditor (CIA); and
(3) Establish an organizational structure appropriate to carrying out the responsibilities and
functions of this section.; and
(4) Set and maintain a tone for ethical behavior, establish a positive ethical environment for the
office of the city auditor, and conduct audit work in accordance with the principles of integrity,
objectivity, confidentiality, and competency.
(b) The mission of the office of the city auditor is to promote honest, efficient, effective,
economical, and fully accountable and transparent city government. To fulfill this mission, the
office of the city auditor shall conduct performance audits and examinations and perform
nonaudit services of any city department, program, service, or activity as approved by the city
council. The purpose of these audits and examinations is to provide the city council, and city
management, the residents of Palo Alto, and other stakeholders with independent and
objective information and evaluations regardinganalysis as to whether management is using its
financial, physical, and informational resourcesthe effectivelyness, and efficientlycy,
economically, ethically, and equitably, and in compliance with laws, regulations, contract and
grant requirements, and with which city resources are employed, the adequacy of the system
of internal controls, and compliance with city policies and procedures and regulatory
requirements. Specifically:
(1) The city auditor shall conduct operational and financial audits and other audit work as
requested by the city council. This will include independently determining and evaluating:
(A) The soundness, adequacy, and application of accounting, financial, and other operating
controls towards promoting effective control at a reasonable cost.
(B) The extent of compliance with applicable laws and regulations and with established policies
and procedures.
(C) The extent to which city assets are accounted for and safeguarded from losses of any kind.
(D) The sufficiency, validity and reliability of accounting and statistical data developed within
the organization.
(E) The economy, efficiency, and effectiveness of city departments, programs, services, and
activities.(2) Audits shall be conducted and nonaudit services provided in accordance with
Government Auditing Standards, as established by the Comptroller General of the United
States, General Accounting Government Accountability Office. and the Standards for the
Professional Practice of Internal Auditing, established by the Institute of Internal Auditors
(c) In addition to the aforementioned responsibilities, the office of the city auditor shall:
(1) Select and recommend to the city council for approval an independent certified public
accounting firm to conduct the city’s Coordinate an annual external financial audit for the city
Attachment A
NOT YET APPROVED
with an independent certified public accounting firm selected by the city council and coordinate
the annual external financial audit with the approved firm.
(2) Provide consulting services to city operating departments as requested by the city council or
city manager in their efforts to re‐engineer their operating practices and processes.
(3) Provide consulting services to the city council, as requested, regarding the accuracy and
financial impact of information provided to the city council.
(42) Perform other auditing functions consistent with the provisions of this section.
(d) At the beginning of each fiscal year, the city auditor shall submit prepare an annual audit
plan forto the city council for approval. The plan will be issued on the office of the city auditor
website, with written notification to the city council, and be placed on the appropriate
committee agenda. The plan shall identify the preliminary objectives of each audit to be
performed, reflecting the purpose of the engagement and a preliminary description of the
areas which that may be addressed. The city auditor will review the plan and consult with the
city manager prior to submitting it to the appropriate committee of the city council for
approval. The city manager shall may identify areas where the city will benefit from operational
and financialperformance audits or a nonaudit service. The city auditor will may review the plan
with and seek the advice of the city attorney prior to submitting it to the appropriate
committee of the city council for approval. The annual audit plan may be amended during the
fiscal year with approval of the city council.
(e) The office of the city auditor will issueshall prepare quarterly reports to the city council
describing the status and progress towards completing the audits. The reports will be issued on
the office of the city auditor website, with written notification to the city council, and be placed
on the appropriate committee agenda.The annual audit plan may be amended during the year
with the approval of the city council.
(ef) (1) The city auditor shall prepare a written report of the results of each audit conducted
and will be responsible for retaining a copy as a permanent record. The reports shall meet the
reporting requirements specified in the Government Auditing Standards and the views of the
city manager.
(1) Within two weeks after receiving the final draft report, the city manager, or his or her
designee, will prepare an official written response to the findings and recommendations
contained within the report and provide the response to the office of the city auditor. The city
auditor and city manager may agree to an extension of the two‐week time frame if requested
by the city manager. If a response is not received within the established timeframe, the office
of the city auditor will issue the audit report without management’s response.
(2) Each audit report shall include:
(A) A statement of audit objectives and a description of the audit scope and methodology.
Attachment A
NOT YET APPROVED
(B) A full discussion of audit findings and conclusions.
(C) Recommendations for necessary or desirable action.
(D) A response from the city manager or the highest official of the audited entity, except as
described in the audit report processing (subsection (f)(4), below).
(f) (1) Upon completion of the final draft of an audit report, and prior to submission of the
report to the city council, tThe office of the city auditor shall transmit also provide a copy of the
draft report to the city manager or the highest official of the audited entity, to the city attorney
for review and comment, including legal advice relating to disclosure of information contained
in the report,; and to other appropriate officials as determined by the city auditor.
(2) Within five weeks after receiving the report, the city manager or the highest official of the
audited entity will prepare an official written response to the findings and recommendations
contained within the report and transmit the response to the city auditor. The report will be
issued to the city council within four weeks of receipt of the response.
(3) The official written response will be included verbatim in the audit report issued to the city
council by the city auditor.
(4) If a response is not received within the established five weeks, as described in subsection
(f)(2), above, the audit report will be issued to the city council without management response.
(5g) The aAudit reports and other work products of the office of the city auditor will be placed
on the agenda of the city council or appropriate city council committee within forty‐five
calendar days after the audit report issued to the city council.consistent with the following
general guidelines:
(1) Information items and items that will be discussed in a study session will be placed on the
council agenda.
(2) Audit reports and other audit work products will be placed on the finance committee
agenda when the subject matter focuses primarily on enterprise fund departments, functions,
or activities, or is concerned primarily with financial matters.
(3) All other audit reports and audit work products will be placed on the policy and services
committee agenda.
(gh) The city auditor will prepare and issue an annual report on the status of recommendations
made in completed audits. The report will reflect the status as reported by the city manager or
the highest official of the audited entityhis or her designee. The report will be issued on the
office of the city auditor website, with written notification to the city council, in the first quarter
of the fiscal year and be placed on the finance appropriate committee agenda. Further follow‐
up audits will be conducted as determined and recommended by the city auditor and approved
by the city council.
Attachment A
NOT YET APPROVED
(hi) (1) Unless prohibited by law, Tthe office of the city auditor will have unrestricted access to
all sources of information, property, and personnel relevant to 1) the performance of a council‐
approved audit or 2) the identification of potential risks when developing the annual audit plan,
unless prohibited by law. Department management and staff will not intentionally withhold,
hide, or destroy any information or property that may be potential evidence in a planned or
ongoing audit. Nothing in this section shall authorize the office of the city auditor to have
access to documents, records, and information related to the office of any elected official.
(2) The office of the city auditor will handle Ddocuments and information will be handled
received with the same prudence exercised by those normally accountable for them and
consistent with the standards established by the Institute of Internal Auditorsappropriate
policies and regulations and the ethical principles cited in the Government Auditing Standards.
(j) To the extent possible, the office of the city auditor will accommodate an area’s daily
operations in scheduling and conducting such audits. Nothing in this section shall authorize
access to documents, records, and information related in any way to the office of any elected
official.
SECTION 3. This ordinance shall become effective upon the commencement of the
thirty‐first day after the date of its adoption.
INTRODUCED:
PASSED:
AYES:
NOES:
ABSTENTIONS:
NOT PARTICIPATING:
ABSENT:
ATTEST:
___________________________________ ___________________________________
City Clerk Mayor
APPROVED AS TO FORM: APPROVED:
___________________________________ ___________________________________
Senior Assistant City Attorney City Auditor
Attachment A