OPENPUBLICA · PUBLIC MEETING RECORD
Record of Proceedings

Indianapolis Audit Committee Meeting Summary – March 13, 2026

Other Meetings (A-H)Friday, March 13, 2026
BodyIndianapolis, Indiana
SessionOther Meetings (A-H)
DateFriday, March 13, 2026
StatusFILED
Video Record

STREAMING COPY IN PREPARATION — RECORDING AVAILABLE FROM THE ORIGINAL SOURCE

Transcript — Verbatim
0:45

Thank you very much.

0:46

I always like to have the audience introduce themselves because they're the ones that get the real work done.

0:52

So thank you for all your efforts.

0:59

That as you are speaking, please do turn on your mics so that the uh recording can pick up your voice.

1:07

This meeting is recorded and then is available for public viewing.

1:14

First order of business after introductions, then is the review of the minute meetings from our last meeting, October 31st, 2025.

1:24

Any comments or corrections to the minutes.

1:33

Mr.

1:33

Chairman, I move that we adopt the minutes from the last meeting.

1:38

Okay.

1:40

I'm gonna I should have spoke first.

1:44

Um if if I can, Counselor.

1:46

Um I had a discussion with um Director Jones on this when I reviewed the minutes.

1:52

Um I noticed at the end there was just kind of there was a list of questions, but no answers.

1:59

And so I've asked um Director Jones to go back and add the answers to those questions for the minutes so that we have those.

2:07

And so if it's okay with you, counselor, um I would like to hold that motion and then review it, and then next committee member we'll take or the next committee meeting we'd take action on the minutes if that's exactly.

2:20

Sure.

2:21

I am in my motion accordingly.

2:23

Thank you very much.

2:24

So um with no other corrections, if you just go back and add in the question or the answers to the questions, then we can take them minutes next next meeting.

2:33

Sure, we'll do that and and recirculate them to the committee and then you know, approve in July.

2:37

Very good, thank you.

2:39

Um as a reminder to committee members, uh remaining meetings for 2026 is uh Friday, July 31st, 2006, uh 9 a.m.

2:51

in room 221.

2:53

And then our final meeting um for 2026 will be October 30th, 2026, 9 a.m.

3:01

in room 221.

3:03

As a further reminder the to the committee members uh at your annual economic statements of interest um are due and and to be returned to the Office of Corporation Council between April 1st and May 1st of 2026.

3:21

I assume those will be emailed out to the committee members.

3:25

Yes, they will be.

3:27

Okay.

3:28

And then it has to be turned in between April 1st and May 1st, right?

3:32

Indeed, yeah, the deadline is May 1st.

3:34

So a full month.

3:35

Okay.

3:36

We'll remind you in case you forget.

3:38

Very good, thank you.

3:40

Uh any other administrative updates from committee members prior to getting into the presentation by Director Jones.

3:51

Very good.

3:52

All right.

3:53

The floor is yours, sir.

3:56

Thank you.

3:57

Um so we have a relatively light agenda today uh in terms of number of uh uh discussion items, but we have a number of updates to kind of provide you that have taken place over the past six months, I guess, since we last met.

4:11

So we will hop into our presentation and I will uh kick it over to Deputy Director Vivian Agnew to kind of uh get us started.

4:22

Good morning, folks.

4:23

Uh so today as a brief overview, we're gonna speak through um just an administrative update.

4:28

We'll talk about the work we've done uh since January um to today.

4:32

Um I'll give you a brief kind of update on the 2025 annual report, specifically focusing on audit committee activities for that year.

4:39

Um and then Wes will go into our 2026 risk assessment and annual plan.

4:45

Um so to get us started on that administrative update.

4:48

Uh we are very happy to have uh Malik Awadoyan joining our staff.

4:52

He was um he joined very recently as of March 2nd.

5:00

He's in our senior auditor role, and we're super happy to have him and very excited to get him ready and acclimated to the city county environment.

5:05

In terms of staff development and utilization, we have a couple opportunities coming up in the next month or so.

5:11

We have our 2026 International Society for Performance Improvement Annual Conference.

5:16

This is not something our staff has engaged in before, but it's a we had a virtual option, and we really want to get an opportunity for our performance staff in particular to have some of those continuing professional education pieces.

5:28

So we're very excited to have folks participate in that this year.

5:32

We're also going to make a visit over to the State House for Data Day 2026.

5:37

If you guys haven't been, it's a really cool opportunity to see what the state and other agencies and other municipalities are doing around data.

5:46

And it's just a great time to network and get to know folks who are doing very similar work to us.

5:50

So if you haven't been able to participate in that before, I think it's at least checking, it's at least worth checking out the website.

5:56

I think they always have Chick-fil-A for lunch as well, which is a big plus for me.

6:01

So 1010 would recommend.

6:04

And finally, this one we go to often.

6:06

We have our 2026 conference with the association of local government auditors.

6:11

Last year I remember that conference being super valuable.

6:14

We got a lot of good information about out of it and some ideas that we were able to use to streamline kind of our workflow and efforts.

6:20

So we're very excited for our audit staff to be able to see what we can glean from that again this year.

6:26

Another reminder about your economic statements of interest.

6:29

Please turn those in.

6:30

Again, we'll send you reminders.

6:32

I think specifically just for your guys' awareness, that email will come from like the ethics at indie.gov email address.

6:38

It will not come from us.

6:40

So it is not a phishing alert or anything like that.

6:42

It is gonna come from a separate email address.

6:44

We'll send you another separate reminder, but the first time you hear about it, it will come from the ethics at indie.gov email address.

6:53

Before you move on, um, Vivian, on your staffing, does that bring your agency up to full staffing?

7:00

Yes, it does for a little while.

7:03

We have um a person who is um currently on maternity leave, so she is so we're like not quite fully staffed because she's away, which is an excellent thing.

7:11

We're very happy for her.

7:12

And then we do have somebody leaving our agency a little in about a month, I think, um, the first week of April or so.

7:19

Um but it's a great move.

7:21

We're super happy for him.

7:22

He'll actually be joining the controller's office.

7:24

And while we're sad to see him go, he will be an excellent addition to your team, Abby.

7:29

Um so we're happy to keep good people in the city, and we'll get started on that next performance consultant role as soon as um we're able to do so.

7:37

So from a staffing perspective, as we go into the audit, you're you feel you're fully staffed.

7:45

Yes, on the audit side, we will be fully staffed.

7:47

Okay, thank you.

7:51

Um let's jump over to 2026 year to date.

7:54

Um, so the audit engagements we're currently working on are that Marion County Auditor's Office audit with the benefit leave.

8:00

Um, we're still continuing to work on that.

8:02

There's a couple of other testing pieces we want to finish wrapping up, um, but we should be able to get that done ideally before uh we see you next in July.

8:09

And then we've also been working with the Office of Public Health and Safety.

8:13

Um, I'm happy to report that we've had our exit conference recently.

8:17

There are a few um kinds of updates we'd like to make to the report as a result of that conference, but we should be able to have that out publicly um quite soon.

8:25

So happy to share that with you guys and talk through it as needed.

8:30

Um, in terms of enterprise collaboration, um, I know that Wes has continued working on the enterprise culture working groups.

8:37

Um that process is kind of wrapping up and they're getting ready to kind of distribute a plan for how we're gonna move forward in terms of that uh working culture, and we're very excited to see what happens there.

8:48

Um on our performance side, we um last year uh released our indie lean continuous improvement training.

8:56

So that's fully available to all staff and employees of the City County Enterprise, and it's always on demand, so people can take it as needed.

9:03

Um in December of last year, we were able to add a new module across audit and across performance.

9:11

We heard from a lot of folks that they wanted more help with uh developing standard operating procedures for their office.

9:16

So our audit team and our performance staff worked really collaboratively to build out a module specifically related to standard operating procedures, which fits in nicely with the lean continuous improvement training already, and so that's been something we were able to unveil and are excited to kind of advertise a little more a little later in this year, and we're hopeful that that's something that's very beneficial just across departments and agencies.

9:41

Um it's always great to have good standard operating procedures.

9:44

So in terms of our kind of flagship program, indie performs on the performance side.

9:50

Um we had our symposium event, which was hosted on January 29th.

9:54

Um that event was excellent.

9:55

Uh we had folks from previous sessions kind of show folks um what they had done in terms of the graphs and uh dashboards they'd built out in Power BI.

10:04

This event was a little less well attended than it was last year, but I'm gonna blame that on the big snowstorm we had.

10:10

That was the day that we all like took Monday off because there was snow was so bad and we couldn't come in.

10:15

So that event was hosted Thursday, and I think people were still kind of figuring out whether or not they wanted to make the track.

10:21

But otherwise, I think even with the snow, it was very well attended.

10:24

We had lots of participation from the folks who did come.

10:27

Um and it was very exciting to just see what people had been able to accomplish with the help of the Office of Audit and Performance.

10:34

So excellent event, and we're excited to host it again next year.

10:37

Um we do have a current session of the Indie Performance Program that's ongoing through April 2nd.

10:42

We have 24 participants enrolled currently, and our official class periods start next week.

10:47

So very excited to engage in that as well and see what folks come up with.

10:51

Um next, we'll go to the 2025 annual report.

10:55

Um I'm gonna focus today on the activities that your um audit committee has completed.

11:01

Um, of course, we always like to pepper in some of the things that the Office of Audit and Performance has done as well in the annual performance in the annual report, but generally this is um a report that kind of goes over your guys' activities so we can inform folks of what we did last year.

11:16

Um on March 7th, we had Forvis Mazars present um an update on their external audit planning.

11:22

So they kind of went over the scope of work with you guys and talked about some of the risk areas they were focusing on.

11:27

Um, in terms of our administrative update, we covered the risk assessment results in the 2025 annual plan, which you'll hear about from Wes again shortly.

11:35

Um July 25th, we went over the external audit results, which was generally the bulk of that meeting.

11:41

We had clean reports for both the city and the county, so excellent work there, which I'll credit again to our uh staff just across the enterprise who are working hard towards making sure we have all of our I's dotted and T's crossed.

11:54

Um October 31st, we had um another kind of brief meeting that focused specifically on OAP's activities.

12:02

We gave um an enterprise and an enterprise risk and safety presentation that was shared on behalf of OFM's risk management folks.

12:10

Um, and then we also shared some updates around cybersecurity, which we presented on behalf of the Internal Services Agency.

12:16

So that's kind of what we got what you guys took care of last year.

12:20

It was a really productive year, and um, we should be able to have the contents of that report ready and shared with you shortly so that we can um approve it in the next meeting.

12:30

And I'll kick it over to Wes.

12:34

All right, thank you, Vivian.

12:35

Appreciate that.

12:36

Uh looking at our 2026 risk assessment, if you kind of recall, we have two portions of it.

12:42

So there's a quantitative portion and a qualitative portion.

12:46

This year, we every year honestly, we continue to kind of revise our approach to make it more accurate and more useful for us and our work uh throughout the year.

12:54

So this year we reinstated uh more of the qualitative portion of our risk assessment and uh took a lot of time to sit down with about 10 different city-county leaders and different uh agencies that have responsibility over financial controls, risk, uh, and the like.

13:11

So I kind of jumped ahead, but that uh was the most impactful part of our our risk assessment this year, and we got a lot of great information from those folks that are engaged in those activities.

13:25

On the quantitative side, we looked at nine measurable risk factors that include employee tenure, budgetary expenses uh from our audited financials as well as federal grant expenditures.

13:38

And uh this is a semi-complicated Excel model that uh we took we adjust again year in and year out to adjust for various risk factors, any new information we we learn, uh, budgets and other metrics change of course year over year, and so we kind of make adjustments for those.

13:57

But it all it just helps kind of uh give us a guideline to apply uh some of the other qualitative measures that we learn through our interviews.

14:06

Uh like I mentioned there's a weighted scale that considers both the regular relative magnitude and and like and potential impact for uh risk-related matters in those areas, um, and then it kind of essentially spits out a score per agency or department about what their rating is for that year, and then we compare that to a prior year and you know, tend to focus in on ones that have either significantly increased or significantly decreased to try to understand some of the primary drivers of those changes.

14:35

I mentioned the interviews that we had, those were great.

14:37

We'll probably look to expand those next year.

14:40

It's sometimes difficult through the end of the year, holidays, beginning of the year, to get these folks uh on these folks' calendar because they're quite busy, but uh they were all very helpful in speaking with us and very candid, and it was quite informative.

14:55

And so again, that kind of works as a guide and uh helps identify some risk areas, and if you'll recall, we've we've kind of revised our approach.

15:03

Um we're continuing to revise it, but we're actually kind of making some great strides on it now, in that we're gonna look more at specific risk areas and then select different agencies and departments that where those risks fall to have greater audit coverage.

15:19

You know, historically a few years back, we would pick an agency based on that risk assessment and kind of audit that agency A to Z, which has some benefits, but I felt like we weren't able to get enough depth into kind of a number of key areas, and so by focusing on the risk area itself, and then applying uh those procedures across different agencies and departments.

15:40

I think we have a better risk coverage just given our kind of relatively small audit staffing compared to the scale and size of the enterprise.

15:50

Uh just looking at a couple of insights from the risk assessment.

15:55

Um a lot of these, if you've been around, are not necessarily surprising, but you know, they we do have inconsistent levels of expertise related to data literacy, technical knowledge, grant compliance, enterprise processes and expectations.

16:09

Uh this is something that I feel most agencies and departments are trying to combat every day.

16:15

Um specifically, our performance and innovation team does a lot of work around the data uh literacy element with the Indy Performance program.

16:23

Um we've got some new staff in the grants office, and uh everyone, of course, faces staffing issues, be it lack of staffing or or other related matters.

16:33

So it's it's a constant challenge, I believe, for city and county agencies, but I believe we are making strides, at least in the last four years.

16:40

I've seen quite significant strides in improving that and leveling up kind of the competencies of our staff.

16:47

Some other issues, um, you know, disaster recovery preparedness, including email, system resilience, data protection, and addressing matters that might arise with a significant event that could happen.

17:00

Uh, those have been talked about a lot more recently in terms of business continuity.

17:04

I know the OFM risk group is really concerned about this.

17:08

ISA is concerned about it, we're concerned about it too.

17:11

Um, but again, there are more conversations going on, I feel like than there have been historically, to address some of these things.

17:16

And frankly, COVID, I think, accelerated some of those improvements so that we're in a better place to be more responsive should an adverse event take place.

17:27

Uh a few other items that popped out were you know, proper oversight and usage of P cards and those controls.

17:34

Uh mentioned kind of the employment and staffing issues that that kind of persist across the enterprise.

17:42

And then are you know the recent changes over at the State House uh that have impacted uh revenue?

17:47

I'm sure our controller is cringing uh hearing that, but she's done a masterful job of kind of helping everyone through uh the budget process and the changes that have impacted kind of our operations, and those are uh again can significant risks and and items that kind of came out of our our risk assessment.

18:06

Any questions specifically on those?

18:09

Yes, Council Boots.

18:10

Thank you, Director Jones.

18:12

Um can you just refresh our memory?

18:16

When you talk about proper oversight of P card usage, what are you really referring to there?

18:22

Yeah, so a lot of our procurement cards have restrictions, of course, with like a limit and the types of merchant codes in which they can be used.

18:31

Some agencies and departments, due to the nature of their work, need to have some of those restrictions removed, uh, which opens the door for purchases that aren't for a business purpose.

18:43

And so uh we haven't explicitly found that to be the case or that to be happening.

18:48

Um, but the entire PCARD process is voluminous.

18:53

Of course, when you add up multiple cards off multiple agencies and departments, um, it it just remains a significant area of risk, and uh you know, we're keeping an eye on the controls and approvals and processes in that area to make sure that everything remains compliant.

19:07

You know, these are essentially credit cards given to certain employees that are charged with buying supplies or services for their particular job function.

19:15

That's correct, yes.

19:16

Anything you wouldn't you know procure through a traditional procurement process and setting up a contract with the vendor.

19:21

Um, you know, it's everything from Amazon to uh microphones crew.

19:29

Yeah, uh-huh, things that are that are kind of just uh a little lower dollar value.

19:33

Thank you.

19:34

Yep.

19:35

Any other questions from anyone?

19:37

Yeah, Chair Reynolds.

19:38

You mentioned um at the beginning earlier in your presentation that there were nine risk factors.

19:44

You mentioned three of them.

19:46

Can you list the other six?

19:49

Sure.

19:49

Uh I'm gonna challenge my knowledge here.

19:51

So uh four of them are characters one through four.

19:55

So the spin with our budgetary spin.

20:00

So character one, for those that aren't aware, character one is personnel expenses, character two is materials and supplies.

20:06

Yes, thank you.

20:07

Uh character three uh is contractual services basically.

20:13

Uh and then character four is with would capital be the way to say that capital kind of expenses, so desks, chairs, uh capital assets that will be um used by agencies and department.

20:25

And so we excluded character five, which is chargebacks, because it's kind of more of a financial transaction.

20:30

So those are the first four.

20:32

Um we look at um employee tenure.

20:37

So uh that's two of the categories.

20:39

So number of employees less than, I'm sorry, percentage of employees per unit that are less than have less than two years of tenure, and then the number of employees percentage of employees that have over 10 years, I believe, of tenure, um, because there are significant, or I won't say significant, but specific risks for each of those groups.

20:58

Um how many I add, is that six?

21:00

Uh total federal grant expenditures is another.

21:04

Um again, that is audited pretty heavily in the external audit.

21:09

Um, but uh just with all the compliance regulations that are are put on grant funding, there is can be various risks associated with having more of that.

21:20

And Heather, you can you help me out here?

21:24

Uh in mismanagement tips, the uh review because we are the ones who are in charge of receiving those tips and processing those tips, so we include that information by department.

21:39

Um trying to think of what the other ones are.

21:44

Now I'm drawing the point too.

21:46

Uh legal settlements.

21:48

Yes, thank you.

21:49

Legal uh payouts per department.

21:52

And workers' compensation.

21:54

So that's workers' compensation.

21:56

I think that's it.

21:58

I think that covers it perfectly.

22:00

See, that's why they're so good.

22:01

Exactly.

22:02

That's why uh introduced themselves.

22:04

Exactly.

22:04

Yes, yeah.

22:06

No, we we appreciate them.

22:07

So that's there are obviously other things we could bake into that, and we look at other factors year in and year out, but those are the primary ones that we felt really drive significant financial risk, and so we use those to do our calculations.

22:21

So are you prepared or in a position to tell the committee kind of the results and and what your plan looks like going forward, or at least initially?

22:32

I mean, I'm not sure how you how you roll this out throughout the course of the year.

22:37

For sure, yes.

22:38

And and as I get into the plan, it'll speak to that a little bit.

22:42

Um, but uh in July, I'm happy to do a more detailed um breakdown for you of kind of how we got to the decisions we made for kind of the risk areas that we plan to address.

22:54

Um we let this just a little more high level, but you'll see some of the carry-throughs and themes in kind of the planning for 2026 here.

23:01

Okay, very good.

23:02

Other questions.

23:06

Great, thank you.

23:08

So as we look to the plan for the rest of the year, um, of course, we have our continuous kind of ongoing items.

23:15

Uh the most the nearest, I guess that's about to kind of kick off is our external audit support.

23:21

We uh each year we lend about 400 hours from the audit team to support of the external audit.

23:28

We have been in contact with Forest Mazars on that.

23:30

That is uh about to heat up very shortly.

23:33

Um so we look forward to doing that.

23:35

Of course, we continue our cash count activities where we make spontaneous visits to ages agencies and departments that handle cash and uh do a spontaneous review of their cash control handling and procedures.

23:48

Uh we'll continue to administer our whistleblower tip line, so to speak.

23:53

It's an online form where uh folks inside or outside the enterprise can make uh anonymous uh submissions based on uh things that they observe.

24:03

Internal controls, of course, remains a priority uh between us and and OFM and um another member of other agencies.

24:11

Uh you know, continuing to educate our folks.

24:14

Forbus Mazars has been really a great partner in that and you know, offering our um internal controls training.

24:20

Uh we've done one or two each year, and we're in discussions about how best to do that once the audit concludes for this year.

24:27

Um again, the you know, next fall we'll be back in our risk assessment and um our internal kind of policies and procedures.

24:34

Uh the internal institute of internal auditors uh has continuing updates on their standards, and so we review and make sure we're applying those as necessary to remain compliant with those those regulations.

24:47

In terms of planned projects, uh, this is kind of where the tie-in to the risk assessment comes in.

24:52

So, as I mentioned, we want to do kind of more targeted audits, which are risk-based reviews of processes across various agencies.

25:00

Uh my next slide will get into the details of where we're gonna focus for this year, but that's gonna take up a chunk of time.

25:06

We always leave a little bit of capacity for special projects and assessments.

25:11

I feel like if you look at our time spend over the last couple years, that portion of it has increased, uh, which I think is good on a number of levels.

25:21

I think it speaks to the confidence that our colleagues have in our our department and um also their awareness to areas that need further examination and overall that's that's just a good thing.

25:32

So we always leave time for that.

25:35

Uh the performance and innovation team, of course, is doing a great job with the indie performance program.

25:39

Um the current session is winding down, um, but we'll have a summer twenty s six session as well as one in the fall.

25:47

And they're also continuing to work on that change management training, which will be released in in quarter three.

25:53

Any more questions on the plan?

25:55

Sure.

25:56

Thank you, Director.

25:57

The the whistleblower administration.

26:00

Can you just give us a little highlight on that recent activity, if any, in the past year of what kind of whistleblower complaints you typically receive or their nature?

26:12

Sure.

26:13

So the it's been a long process to get to where we are with this online form.

26:17

We used to be recalled we used to have an actual hotline.

26:20

It was a voicemail box, you would call and and leave the leave the details.

26:24

That began to be abuse uh for a number of different reasons.

26:29

We had, you know, um people calling in about a number of things that aren't related to city county business, and you know, when people Google whistleblower or p complaint, there's a number of things coming up.

26:41

We come up, SBOA comes up, uh federal agencies come up, so sometimes they just kinda spray and pray, I think say they just send the same thing to different things.

26:50

So a lot of those things don't apply to us.

26:52

Um with kind of the abuse we had where we had uh someone um that was in a facility that was kind of calling incessantly with uh inappropriate messages basically.

27:02

We felt it was best to kind of transition to something and provide it per present a little more structure so that people understood the types of complaints that we actually can field.

27:11

So we worked with ISA to develop this online form, which still allows anonymous submissions, but has a lot of disclaimers about if this is not related to City of Indianapolis or Marion County, Indiana business, then here are some other areas in which you should direct your complaint.

27:30

Um while that's helped some, we still the overwhelming majority of the complaints we get or submissions we get are not related to um city-county business.

27:41

It's um the restaurant across the street, you know, plays music too loud or you know, items like that.

27:49

Um there have been a couple of submissions that have um had some investigation and had some merit to them um largely related to behavior of of employees of specific departments kind of out in the community in the in the field, and so our process for those is to refer them to the appropriate party in that agency or department and uh they handle the action from there and we kind of just make sure that it's resolved.

28:16

Um so outside of kind of just general uh employee misconduct, is there any other kind of bucket that would I'm not over selling this, but the percentage is extremely low of relevant complaints.

28:32

I would say we're under 10%.

28:34

Is that accurate?

28:36

Yeah, yeah.

28:37

And I do want to clarify too, when we were talking about for the risk assessment, the FLAN tips.

28:44

This is the same thing.

28:45

The whistleblower and the FAM tips are the same thing.

28:49

Um but yeah, probably less than 10% of the tips we receive are ones that relate to anything within the city county, and even a small chunk of those are even actionable.

29:06

Most of them are the details that are included, are not specific enough for anybody to even understand what complaint they're trying to make.

29:18

Um, and they don't of course they have the option to remain remain anonymous, so we don't have the ability to follow up with them to ask for more specific details.

29:27

Um so when that when those tips come, you know, we're kind of there's not really any action available to us at that point.

29:35

Um, but then if there is ever anything that we do feel at least merits some attention, we make sure to forward it to um whichever agency would be appropriate to follow up on that.

29:48

We have not received any tips that I can speak of anyways that would rise to a level that would require us as the OAP to investigate or perform any type of um audit uh around.

30:05

So we're more or less just kind of a conduit for passing any relevant information on to the appropriate agency.

30:15

If that helps, it does, thank you.

30:17

Yeah, thank you, Mr.

30:21

Chairman.

30:22

I would say more of a comment in regards to your special requests area.

30:28

Um just to plant the seed, um, because I I think you guys do really do a good job looking into this, and I always use IHA as an example.

30:35

You've always been uh very helpful in understanding you know what the story has looked like there.

30:40

Um just something else that's come up, you know, in my line of experiences on the council has been the topic around public health, and one of those conversations locally um at least to city county employees, which is you know highly impactful to your area, um, is our DPC model or direct primary care.

31:00

And it's under my understanding that I mean that the controller could probably confirm that you know we do have some upcoming contractual um opportunities on the selection of who that direct primary care provider is.

31:13

And when I've had some of the conversations with uh executive leadership within the city, some of the concerns that we have is that we are paying for um duplicative uh services, and so specifically around um the the primary care part of it being uh multiple places to go get a physical, whether it be from the DPC model or through an insurance model, or even in some departments, uh the option can come through uh, and this is more on the public safety side, but through grants, and there's so there's three ways paying for you know, um go get an annual physical.

31:50

Um we're paying for those up front.

31:52

So that's one one side of that, there's duplicative triplicate triplicative um spending there.

31:58

The second is that we're paying for it up front.

32:00

And so we've got, and this is probably part more negotiation than anything, but just to see uh you know, out of curiosity from an audit standpoint of what is our cost on that.

32:09

Um, if we are paying for folks to go get physicals and they're not getting them, how much are we doing?

32:16

Exactly.

32:17

Utilization, so you know, as you know, uh just going through that topic of um special requests, knowing that there's a potential this year and next year, um, and opportunities to refine that, just ensuring that what we're paying for and what we're getting are you know, is they're not ever gonna be perfect, but is as close as possible, and at least having some insight before they jump into those conversations, I think would be really helpful for them, but also helpful for for us on the council to make sure that the employees and the families of those employees who work for or are part of the city council, uh city county, uh, have the most um you know bang for the buck as it comes to their health, and that we are considering their health as much as possible.

33:00

Sounds good.

33:01

Yeah, I appreciate that that comment.

33:03

We candidly have not kind of gotten into that area yet, so that's I have heard some of the conversations are going on, and there's some contractual renewals and things like that, but that's something we can have some discussions with our colleagues with and see if there's anywhere we can provide some value.

33:20

Of course.

33:23

Nothing okay.

33:25

Okay.

33:27

Uh so looking specifically at the on the audit side here, kind of some more details of our 2026 plan.

33:32

Um we are of course are already into it.

33:36

Um, you know, we've made some progress.

33:38

Um I will start with the second bullet and then move move on.

33:44

So as Vivian mentioned, our audit of the Office of Public Health and Safety Umgagement has completed.

33:54

As we have not released the report yet, we are very close to doing so.

33:58

It's literally the final final uh touches being put on it.

34:02

Um I'm hesitant to share too too many details in a public forum, but I will give you some kind of general takeaways that I think are are not uh incendiary in any way.

34:12

Um I would characterize the report as as not necessarily clean.

34:16

Uh there are a number of findings, I believe there are eight total findings, um, six of which we classified as high risk.

34:24

Uh the other two are moderate.

34:27

They these findings kind of fall across a number of areas um in terms of kind of risk, controls, um a lot of things that govern kind of operational processes, um, they generally are not up to the level that they they should be.

34:45

Um there are a lot of details within those, and I'm happy to kind of discuss any of those with you as as the report comes out, and once you have a take a chance to take a look at it.

34:53

Um I will say to OPHS's credit, they've you know undergone a tremendous amount of growth, especially over the audit period we did, which was 2020 through 2025, essentially, uh 24 and a little bit to 25.

35:03

Essentially, 24 and a little bit into 25.

35:07

And so we were able to see a lot of progress across that period.

35:10

You know, things have improved with different changes in processes and staffing and the like.

35:24

And to help uh encourage and make that sure that gets done, we're going, we're planning to do uh kind of a more, we always do like a follow-up of some sort to kind of make sure that the management responses that are put in there for how they're gonna address findings are being progress is being made against them, and that's one of the things you know we report back to you on kind of each October.

35:45

Um, but given the nature of some of the things that we found with OPHS, I think it's in their best in a benefit uh or in best interest if we do a more substantive kind of follow-up, um, which will take place later this this year once they're have another opportunity to kind of further implement some of the changes they've had.

36:04

So once I get through the slide, happy to take any questions on that, but just wanted to kind of put some details around that since I know we've been talking about it for a while and there's been some questions.

36:13

Umly, uh another tricky engagement is the is the audit of uh the human resources division.

36:20

Um this one again uh has kind of been ongoing for a little bit, and given some of the numerous changes that took place within that division, uh the it was a bit of a perfect storm in some ways, in that the timing of our kind of completion of our field work and you know, discussion of findings was right at the time a lot of major changes were taking place within HR, and they were actually implementing a number of things to directly address the findings that we had, not necessarily in response to what we had found.

36:55

Um they again the timing was close, but so those things were were ongoing and uh it was not reflective of the actual situation, I think, to release the report in the at that time based on the changes that were happening.

37:09

So in order to kind of fully resolve that, um, we are going to go back in this year and um do an update basically since we've we finished our field work, address some of those things, and it will not be a complete revision of kind of the report, but it will update it for all relevant activities that have taken place across the lifespan since it first uh commenced.

37:31

So that I believe will um give a much clearer picture of kind of where HR is that is at this point.

37:38

So those are obviously two more notable kind of audits that have been going on for the last couple years, and so uh just wanted to give the committee a little insight on kind of where those are and how our approaches to to finish those up.

37:51

And then additionally, um our audit team will plan to focus on a couple different areas.

37:57

Uh apologies again to Madam Controller for how this is presented.

38:01

Uh I think I gave her a little bit of a jump scare yesterday by having two OFM two OFM uh it's like three times on here.

38:11

Um so this the plan again, going back to our kind of our risk-based approach, um how the city county operates for various reasons.

38:22

There's just a tremendous amount of onus put on individual agencies and departments for compliance with a lot of these issues.

38:29

That is not to say that purchasing or grants or HR or any of those functions that kind of oversee a lot of different areas are not doing a good job or not doing their job, but just by the very nature of how much work and how many dollars are spent, it it's very difficult for some of those oversight agencies to really have an understanding of every single element that goes into every contract and every that goes to for OCC as well.

38:53

Um so while this is listed as OFM, it's not necessarily a direct audit or review of OFM purchasing or OFM grants.

39:00

It's more so how agencies and departments are doing on their third-party vendor compliance.

39:06

You know, are they holding vendors to the terms listed in the contracts?

39:10

Are they you know paying on expenses that are are clearly stated in the scopes of work and we're making sure there's continuity across all those issues?

39:19

Similarly with grants, you know, compliance is everything with grants.

39:22

Um there's a huge reputational risk if we're not compliant with our grants and we lose potential opportunities for funding and so on and so forth.

39:30

So again, we it was difficult to list this item without putting some sort of agency department with it.

39:38

We just generally tagged OFM because they have involvement throughout those processes, but the actual focus of kind of our work will be on specific agencies and departments and their activities within these purchasing and grant areas.

39:54

Any detailed questions on kind of the more detailed plan for 2026?

39:59

Yes, Counselor Boots.

40:03

I wasn't gonna ask a question, but now that you invited me.

40:05

Oh, I'm sorry.

40:06

I'm sorry.

40:06

I'm putting everybody on the spot.

40:08

Just briefly.

40:10

You said the uh uh audit report for OPHS is soon forthcoming.

40:15

Can you give us a little bit more of a definite timeline?

40:18

Yes, so candidly, our hope was to have it already out by by today.

40:22

Um and unfortunately that did not happen.

40:25

Uh the some of the OPHS leadership, um, again, we met with them, was it last week?

40:29

I believe, yeah, last week was our exit conference.

40:31

We're all in agreement, we're on the same page, and other uh leaders are on the same page as well.

40:36

So they literally just have some responses to edit, but they've been kind of out, they're key individuals that are doing those, and so um it will certainly be out by the end of March.

40:46

Yes.

40:47

Thank you.

40:50

Remind me if you will, Director Jones.

40:53

Do those re individual reports from the audit reports as they come out, are they sent to committee members or at least are committee members notified with a link or something to be able to review those reports?

41:05

Yes, yeah, I'm happy to send it directly to you.

41:07

It will be up on our website um shortly after the kind of key parties internally have had a chance to see it.

41:14

But um with this one, I'm happy to send it directly to the committee.

41:17

Yeah, I guess I'm asking not necessarily specifically for this one.

41:21

Sure.

41:22

I I'm asking more generically on whether or not those are sent directly to the committee members as they are published.

41:30

Yes, yeah, I think that's kind of best practice.

41:32

I won't make you go to the website or make you click the link.

41:34

So we'll we'll just send them directly as we finish reports, send them directly to the committee.

41:38

Thank you.

41:38

Sure.

41:44

All right.

41:44

That was kind of the the the meat of our our uh report again.

41:48

Just kind of a lot lot going on.

41:50

Um, and we're uh excited kind of about the progress and things that are being made, but there's a lot to tackle.

41:56

Um but we have a great team and great staff, and so we're looking forward to to continue to do that in 2026.

42:04

Other questions from committee members.

42:10

I will let the committee members know that I did um have a brief meeting with um the external auditors um just as a prep for as they were coming in.

42:23

You may have noticed that on the 25 when Deputy Director Agnew did the presentation of 2025, there was a presentation last March by four of us kind of saying here's what we're here's our plan.

42:38

Um this year we took it kind of as the chairman will take one for the team and the chairman will sit down with four of us and kind of talk about their plan and and make sure everything's going there.

42:50

So that did occur.

42:51

Uh we had we had a good discussion about what their plan is, very consistent uh to what they've done in the past.

42:57

So that has occurred.

42:59

They're they're ready to go and and look forward to the July meeting where when they'll come back to the committee and give us the results of the of the presentation.

43:07

So just wanted the committee to know that.

43:10

Any other thoughts, comments, questions, concerns?

43:15

I love efficient meetings.

43:18

We aim to please all right.

43:20

As a reminder, then our next meeting will be July 31st uh 2026, 9 a.m.

43:27

in room 221.

43:28

Main focus should be the um results of the external audit, um, which should be the focus of that meeting.

43:36

So and obviously if there's any issues that come up during that time frame or during the audit, if if um I mean I'm available if if you need any assistance from the committee, or we can certainly reach out to any committee members if if necessary.

43:52

Appreciate that.

43:53

Thanks.

43:54

All right, very good.

43:55

Can I have a motion on adjournment?

43:57

So moved second, been moved and seconded.

44:00

We are adjourned.

44:01

Thank you.

Discussion Breakdown — Share of Meeting
Data Analysis█████████████████████████████████████████41%
Compliance and Internal Audit████████████████████20%
Procedural████████████12%
Public Engagement████████8%
Public Health██████6%
Public Safety██████6%
Budget Equity Analysis████4%
Personnel Matters███3%
Summary of Proceedings

Indianapolis Audit Committee Meeting – March 13, 2026

The Audit Committee of the City of Indianapolis and Marion County met on March 13, 2026, at 9:00 a.m. in Room 221. The meeting was chaired by [Chair Reynolds] and included presentations from Director Wes Jones and Deputy Director Vivian Agnew of the Office of Audit and Performance (OAP). The agenda focused on administrative updates, the 2026 risk assessment, the 2026 audit plan, and status of ongoing audits. No public comments were received.

Key Administrative Updates

  • Minutes from October 31, 2025: Approval was deferred because the minutes lacked answers to questions raised at the prior meeting. Director Jones will add the answers and recirculate the minutes for approval at the July 2026 meeting.
  • Upcoming Meetings: The remaining 2026 meetings are scheduled for Friday, July 31, 2026, 9:00 a.m., and Friday, October 30, 2026, 9:00 a.m., both in Room 221.
  • Economic Statements of Interest: Committee members were reminded that annual statements are due to the Office of Corporation Counsel between April 1 and May 1, 2026. Notifications will come from ethics@indy.gov, not from OAP.

Staffing and Professional Development

  • New Hire: Malik Awadoyan joined as a senior auditor on March 2, 2026, bringing the audit team to full staffing (though one person is on maternity leave and another will depart in April).
  • Conferences: OAP staff will attend the 2026 International Society for Performance Improvement Conference (virtual), Data Day 2026 at the State House, and the Association of Local Government Auditors Conference.

2026 Year-to-Date Audit Engagements

  • Marion County Auditor’s Office (Benefit Leave): Ongoing; final testing expected to wrap up before the July meeting.
  • Office of Public Health and Safety (OPHS): Exit conference completed; the report is in final review with eight findings (six classified as high risk, two moderate). Findings span operational controls and risk management. Director Jones noted progress in OPHS due to growth and changes during the audit period (2020–2025). The report will be released by the end of March 2026 and will be sent directly to committee members.
  • Human Resources Division Audit: The draft report was delayed due to simultaneous major changes in HR. OAP will revisit this year to update findings based on recent improvements, providing a current picture of HR controls.

2025 Annual Report Summary

Deputy Director Agnew reviewed the audit committee’s 2025 activities:

  • March 7, 2025: Forvis Mazars presented external audit planning.
  • July 25, 2025: External audit results – clean opinions for both city and county financial statements.
  • October 31, 2025: OAP activities, including enterprise risk/safety (presented by OFM) and cybersecurity updates (presented by Internal Services Agency).
  • The full 2025 annual report will be shared for approval at the next meeting.

2026 Risk Assessment

Director Jones presented the 2026 risk assessment, which combines quantitative and qualitative analyses.

  • Quantitative factors (9 metrics): Personnel expenses, materials/supplies, contractual services, capital expenses, employee tenure (<2 years and >10 years), federal grant expenditures, management tips/complaints, legal settlements, and workers’ compensation.
  • Qualitative approach: Interviews with 10 city-county leaders across financial controls, risk, and operations. Key themes identified as high risk:
    • Inconsistent data literacy, technical knowledge, and grant compliance expertise.
    • Disaster recovery, email/system resilience, and data protection.
    • Proper oversight and usage of procurement cards (P-cards).
    • Staffing shortages and turnover.
    • Recent state revenue changes impacting budget.
  • The risk assessment will guide audit focus areas, shifting from agency-wide audits to targeted risk-based reviews across multiple agencies.

2026 Audit Plan

  • Ongoing activities: External audit support (~400 hours from OAP), spontaneous cash counts, whistleblower tip line administration, internal controls training, and compliance with Institute of Internal Auditors standards.
  • Planned projects:
    • Third-Party Vendor Compliance: A review of how agencies hold vendors to contract terms, particularly in purchasing and grants. The focus is on agency-level compliance, not a direct audit of OFM.
    • Grant Compliance: Similar cross-agency review of grant management practices.
  • Special projects: Capacity reserved for ad hoc requests. Councilor Boots raised interest in reviewing the direct primary care (DPC) model for employee health, noting potential duplicative spending and low utilization. Director Jones agreed to explore this with colleagues.
  • Whistleblower tip line: Online form receives mostly irrelevant submissions (e.g., local noise complaints). Less than 10% of tips relate to city-county business, and even fewer are actionable. OAP forwards relevant tips to appropriate agencies.

Key Outcomes

  • Minutes deferred: The minutes from October 31, 2025, will be revised with answers to questions and approved at the July 31, 2026 meeting.
  • OPHS audit report: To be released by end of March 2026; committee members will receive it directly.
  • HR audit update: Will be re-performed in 2026 to reflect recent changes.
  • Next meeting: July 31, 2026, 9:00 a.m., Room 221, with a focus on the external audit results from Forvis Mazars.
  • Chair Reynolds reported: He met with the external auditors in advance of their work, confirming their plan is consistent with prior years.

Meeting Transcript

Thank you very much. I always like to have the audience introduce themselves because they're the ones that get the real work done. So thank you for all your efforts. That as you are speaking, please do turn on your mics so that the uh recording can pick up your voice. This meeting is recorded and then is available for public viewing. First order of business after introductions, then is the review of the minute meetings from our last meeting, October 31st, 2025. Any comments or corrections to the minutes. Mr. Chairman, I move that we adopt the minutes from the last meeting. Okay. I'm gonna I should have spoke first. Um if if I can, Counselor. Um I had a discussion with um Director Jones on this when I reviewed the minutes. Um I noticed at the end there was just kind of there was a list of questions, but no answers. And so I've asked um Director Jones to go back and add the answers to those questions for the minutes so that we have those. And so if it's okay with you, counselor, um I would like to hold that motion and then review it, and then next committee member we'll take or the next committee meeting we'd take action on the minutes if that's exactly. Sure. I am in my motion accordingly. Thank you very much. So um with no other corrections, if you just go back and add in the question or the answers to the questions, then we can take them minutes next next meeting. Sure, we'll do that and and recirculate them to the committee and then you know, approve in July. Very good, thank you. Um as a reminder to committee members, uh remaining meetings for 2026 is uh Friday, July 31st, 2006, uh 9 a.m. in room 221. And then our final meeting um for 2026 will be October 30th, 2026, 9 a.m. in room 221. As a further reminder the to the committee members uh at your annual economic statements of interest um are due and and to be returned to the Office of Corporation Council between April 1st and May 1st of 2026. I assume those will be emailed out to the committee members. Yes, they will be. Okay. And then it has to be turned in between April 1st and May 1st, right? Indeed, yeah, the deadline is May 1st. So a full month. Okay. We'll remind you in case you forget. Very good, thank you. Uh any other administrative updates from committee members prior to getting into the presentation by Director Jones. Very good. All right. The floor is yours, sir. Thank you. Um so we have a relatively light agenda today uh in terms of number of uh uh discussion items, but we have a number of updates to kind of provide you that have taken place over the past six months, I guess, since we last met. So we will hop into our presentation and I will uh kick it over to Deputy Director Vivian Agnew to kind of uh get us started. Good morning, folks. Uh so today as a brief overview, we're gonna speak through um just an administrative update. We'll talk about the work we've done uh since January um to today. Um I'll give you a brief kind of update on the 2025 annual report, specifically focusing on audit committee activities for that year. Um and then Wes will go into our 2026 risk assessment and annual plan. Um so to get us started on that administrative update. Uh we are very happy to have uh Malik Awadoyan joining our staff.

SUMMARIZED BY OPENPUBLICA AI
TRANSCRIPT VIA PUBLIC VIDEO
openpublica.com