0:46I always like to have the audience introduce themselves because they're the ones that get the real work done.
0:52So thank you for all your efforts.
0:59That as you are speaking, please do turn on your mics so that the uh recording can pick up your voice.
1:07This meeting is recorded and then is available for public viewing.
1:14First order of business after introductions, then is the review of the minute meetings from our last meeting, October 31st, 2025.
1:24Any comments or corrections to the minutes.
1:33Chairman, I move that we adopt the minutes from the last meeting.
1:40I'm gonna I should have spoke first.
1:44Um if if I can, Counselor.
1:46Um I had a discussion with um Director Jones on this when I reviewed the minutes.
1:52Um I noticed at the end there was just kind of there was a list of questions, but no answers.
1:59And so I've asked um Director Jones to go back and add the answers to those questions for the minutes so that we have those.
2:07And so if it's okay with you, counselor, um I would like to hold that motion and then review it, and then next committee member we'll take or the next committee meeting we'd take action on the minutes if that's exactly.
2:21I am in my motion accordingly.
2:24So um with no other corrections, if you just go back and add in the question or the answers to the questions, then we can take them minutes next next meeting.
2:33Sure, we'll do that and and recirculate them to the committee and then you know, approve in July.
2:37Very good, thank you.
2:39Um as a reminder to committee members, uh remaining meetings for 2026 is uh Friday, July 31st, 2006, uh 9 a.m.
2:53And then our final meeting um for 2026 will be October 30th, 2026, 9 a.m.
3:03As a further reminder the to the committee members uh at your annual economic statements of interest um are due and and to be returned to the Office of Corporation Council between April 1st and May 1st of 2026.
3:21I assume those will be emailed out to the committee members.
3:28And then it has to be turned in between April 1st and May 1st, right?
3:32Indeed, yeah, the deadline is May 1st.
3:36We'll remind you in case you forget.
3:38Very good, thank you.
3:40Uh any other administrative updates from committee members prior to getting into the presentation by Director Jones.
3:53The floor is yours, sir.
3:57Um so we have a relatively light agenda today uh in terms of number of uh uh discussion items, but we have a number of updates to kind of provide you that have taken place over the past six months, I guess, since we last met.
4:11So we will hop into our presentation and I will uh kick it over to Deputy Director Vivian Agnew to kind of uh get us started.
4:23Uh so today as a brief overview, we're gonna speak through um just an administrative update.
4:28We'll talk about the work we've done uh since January um to today.
4:32Um I'll give you a brief kind of update on the 2025 annual report, specifically focusing on audit committee activities for that year.
4:39Um and then Wes will go into our 2026 risk assessment and annual plan.
4:45Um so to get us started on that administrative update.
4:48Uh we are very happy to have uh Malik Awadoyan joining our staff.
4:52He was um he joined very recently as of March 2nd.
5:00He's in our senior auditor role, and we're super happy to have him and very excited to get him ready and acclimated to the city county environment.
5:05In terms of staff development and utilization, we have a couple opportunities coming up in the next month or so.
5:11We have our 2026 International Society for Performance Improvement Annual Conference.
5:16This is not something our staff has engaged in before, but it's a we had a virtual option, and we really want to get an opportunity for our performance staff in particular to have some of those continuing professional education pieces.
5:28So we're very excited to have folks participate in that this year.
5:32We're also going to make a visit over to the State House for Data Day 2026.
5:37If you guys haven't been, it's a really cool opportunity to see what the state and other agencies and other municipalities are doing around data.
5:46And it's just a great time to network and get to know folks who are doing very similar work to us.
5:50So if you haven't been able to participate in that before, I think it's at least checking, it's at least worth checking out the website.
5:56I think they always have Chick-fil-A for lunch as well, which is a big plus for me.
6:01So 1010 would recommend.
6:04And finally, this one we go to often.
6:06We have our 2026 conference with the association of local government auditors.
6:11Last year I remember that conference being super valuable.
6:14We got a lot of good information about out of it and some ideas that we were able to use to streamline kind of our workflow and efforts.
6:20So we're very excited for our audit staff to be able to see what we can glean from that again this year.
6:26Another reminder about your economic statements of interest.
6:29Please turn those in.
6:30Again, we'll send you reminders.
6:32I think specifically just for your guys' awareness, that email will come from like the ethics at indie.gov email address.
6:38It will not come from us.
6:40So it is not a phishing alert or anything like that.
6:42It is gonna come from a separate email address.
6:44We'll send you another separate reminder, but the first time you hear about it, it will come from the ethics at indie.gov email address.
6:53Before you move on, um, Vivian, on your staffing, does that bring your agency up to full staffing?
7:00Yes, it does for a little while.
7:03We have um a person who is um currently on maternity leave, so she is so we're like not quite fully staffed because she's away, which is an excellent thing.
7:11We're very happy for her.
7:12And then we do have somebody leaving our agency a little in about a month, I think, um, the first week of April or so.
7:19Um but it's a great move.
7:21We're super happy for him.
7:22He'll actually be joining the controller's office.
7:24And while we're sad to see him go, he will be an excellent addition to your team, Abby.
7:29Um so we're happy to keep good people in the city, and we'll get started on that next performance consultant role as soon as um we're able to do so.
7:37So from a staffing perspective, as we go into the audit, you're you feel you're fully staffed.
7:45Yes, on the audit side, we will be fully staffed.
7:51Um let's jump over to 2026 year to date.
7:54Um, so the audit engagements we're currently working on are that Marion County Auditor's Office audit with the benefit leave.
8:00Um, we're still continuing to work on that.
8:02There's a couple of other testing pieces we want to finish wrapping up, um, but we should be able to get that done ideally before uh we see you next in July.
8:09And then we've also been working with the Office of Public Health and Safety.
8:13Um, I'm happy to report that we've had our exit conference recently.
8:17There are a few um kinds of updates we'd like to make to the report as a result of that conference, but we should be able to have that out publicly um quite soon.
8:25So happy to share that with you guys and talk through it as needed.
8:30Um, in terms of enterprise collaboration, um, I know that Wes has continued working on the enterprise culture working groups.
8:37Um that process is kind of wrapping up and they're getting ready to kind of distribute a plan for how we're gonna move forward in terms of that uh working culture, and we're very excited to see what happens there.
8:48Um on our performance side, we um last year uh released our indie lean continuous improvement training.
8:56So that's fully available to all staff and employees of the City County Enterprise, and it's always on demand, so people can take it as needed.
9:03Um in December of last year, we were able to add a new module across audit and across performance.
9:11We heard from a lot of folks that they wanted more help with uh developing standard operating procedures for their office.
9:16So our audit team and our performance staff worked really collaboratively to build out a module specifically related to standard operating procedures, which fits in nicely with the lean continuous improvement training already, and so that's been something we were able to unveil and are excited to kind of advertise a little more a little later in this year, and we're hopeful that that's something that's very beneficial just across departments and agencies.
9:41Um it's always great to have good standard operating procedures.
9:44So in terms of our kind of flagship program, indie performs on the performance side.
9:50Um we had our symposium event, which was hosted on January 29th.
9:54Um that event was excellent.
9:55Uh we had folks from previous sessions kind of show folks um what they had done in terms of the graphs and uh dashboards they'd built out in Power BI.
10:04This event was a little less well attended than it was last year, but I'm gonna blame that on the big snowstorm we had.
10:10That was the day that we all like took Monday off because there was snow was so bad and we couldn't come in.
10:15So that event was hosted Thursday, and I think people were still kind of figuring out whether or not they wanted to make the track.
10:21But otherwise, I think even with the snow, it was very well attended.
10:24We had lots of participation from the folks who did come.
10:27Um and it was very exciting to just see what people had been able to accomplish with the help of the Office of Audit and Performance.
10:34So excellent event, and we're excited to host it again next year.
10:37Um we do have a current session of the Indie Performance Program that's ongoing through April 2nd.
10:42We have 24 participants enrolled currently, and our official class periods start next week.
10:47So very excited to engage in that as well and see what folks come up with.
10:51Um next, we'll go to the 2025 annual report.
10:55Um I'm gonna focus today on the activities that your um audit committee has completed.
11:01Um, of course, we always like to pepper in some of the things that the Office of Audit and Performance has done as well in the annual performance in the annual report, but generally this is um a report that kind of goes over your guys' activities so we can inform folks of what we did last year.
11:16Um on March 7th, we had Forvis Mazars present um an update on their external audit planning.
11:22So they kind of went over the scope of work with you guys and talked about some of the risk areas they were focusing on.
11:27Um, in terms of our administrative update, we covered the risk assessment results in the 2025 annual plan, which you'll hear about from Wes again shortly.
11:35Um July 25th, we went over the external audit results, which was generally the bulk of that meeting.
11:41We had clean reports for both the city and the county, so excellent work there, which I'll credit again to our uh staff just across the enterprise who are working hard towards making sure we have all of our I's dotted and T's crossed.
11:54Um October 31st, we had um another kind of brief meeting that focused specifically on OAP's activities.
12:02We gave um an enterprise and an enterprise risk and safety presentation that was shared on behalf of OFM's risk management folks.
12:10Um, and then we also shared some updates around cybersecurity, which we presented on behalf of the Internal Services Agency.
12:16So that's kind of what we got what you guys took care of last year.
12:20It was a really productive year, and um, we should be able to have the contents of that report ready and shared with you shortly so that we can um approve it in the next meeting.
12:30And I'll kick it over to Wes.
12:34All right, thank you, Vivian.
12:36Uh looking at our 2026 risk assessment, if you kind of recall, we have two portions of it.
12:42So there's a quantitative portion and a qualitative portion.
12:46This year, we every year honestly, we continue to kind of revise our approach to make it more accurate and more useful for us and our work uh throughout the year.
12:54So this year we reinstated uh more of the qualitative portion of our risk assessment and uh took a lot of time to sit down with about 10 different city-county leaders and different uh agencies that have responsibility over financial controls, risk, uh, and the like.
13:11So I kind of jumped ahead, but that uh was the most impactful part of our our risk assessment this year, and we got a lot of great information from those folks that are engaged in those activities.
13:25On the quantitative side, we looked at nine measurable risk factors that include employee tenure, budgetary expenses uh from our audited financials as well as federal grant expenditures.
13:38And uh this is a semi-complicated Excel model that uh we took we adjust again year in and year out to adjust for various risk factors, any new information we we learn, uh, budgets and other metrics change of course year over year, and so we kind of make adjustments for those.
13:57But it all it just helps kind of uh give us a guideline to apply uh some of the other qualitative measures that we learn through our interviews.
14:06Uh like I mentioned there's a weighted scale that considers both the regular relative magnitude and and like and potential impact for uh risk-related matters in those areas, um, and then it kind of essentially spits out a score per agency or department about what their rating is for that year, and then we compare that to a prior year and you know, tend to focus in on ones that have either significantly increased or significantly decreased to try to understand some of the primary drivers of those changes.
14:35I mentioned the interviews that we had, those were great.
14:37We'll probably look to expand those next year.
14:40It's sometimes difficult through the end of the year, holidays, beginning of the year, to get these folks uh on these folks' calendar because they're quite busy, but uh they were all very helpful in speaking with us and very candid, and it was quite informative.
14:55And so again, that kind of works as a guide and uh helps identify some risk areas, and if you'll recall, we've we've kind of revised our approach.
15:03Um we're continuing to revise it, but we're actually kind of making some great strides on it now, in that we're gonna look more at specific risk areas and then select different agencies and departments that where those risks fall to have greater audit coverage.
15:19You know, historically a few years back, we would pick an agency based on that risk assessment and kind of audit that agency A to Z, which has some benefits, but I felt like we weren't able to get enough depth into kind of a number of key areas, and so by focusing on the risk area itself, and then applying uh those procedures across different agencies and departments.
15:40I think we have a better risk coverage just given our kind of relatively small audit staffing compared to the scale and size of the enterprise.
15:50Uh just looking at a couple of insights from the risk assessment.
15:55Um a lot of these, if you've been around, are not necessarily surprising, but you know, they we do have inconsistent levels of expertise related to data literacy, technical knowledge, grant compliance, enterprise processes and expectations.
16:09Uh this is something that I feel most agencies and departments are trying to combat every day.
16:15Um specifically, our performance and innovation team does a lot of work around the data uh literacy element with the Indy Performance program.
16:23Um we've got some new staff in the grants office, and uh everyone, of course, faces staffing issues, be it lack of staffing or or other related matters.
16:33So it's it's a constant challenge, I believe, for city and county agencies, but I believe we are making strides, at least in the last four years.
16:40I've seen quite significant strides in improving that and leveling up kind of the competencies of our staff.
16:47Some other issues, um, you know, disaster recovery preparedness, including email, system resilience, data protection, and addressing matters that might arise with a significant event that could happen.
17:00Uh, those have been talked about a lot more recently in terms of business continuity.
17:04I know the OFM risk group is really concerned about this.
17:08ISA is concerned about it, we're concerned about it too.
17:11Um, but again, there are more conversations going on, I feel like than there have been historically, to address some of these things.
17:16And frankly, COVID, I think, accelerated some of those improvements so that we're in a better place to be more responsive should an adverse event take place.
17:27Uh a few other items that popped out were you know, proper oversight and usage of P cards and those controls.
17:34Uh mentioned kind of the employment and staffing issues that that kind of persist across the enterprise.
17:42And then are you know the recent changes over at the State House uh that have impacted uh revenue?
17:47I'm sure our controller is cringing uh hearing that, but she's done a masterful job of kind of helping everyone through uh the budget process and the changes that have impacted kind of our operations, and those are uh again can significant risks and and items that kind of came out of our our risk assessment.
18:06Any questions specifically on those?
18:10Thank you, Director Jones.
18:12Um can you just refresh our memory?
18:16When you talk about proper oversight of P card usage, what are you really referring to there?
18:22Yeah, so a lot of our procurement cards have restrictions, of course, with like a limit and the types of merchant codes in which they can be used.
18:31Some agencies and departments, due to the nature of their work, need to have some of those restrictions removed, uh, which opens the door for purchases that aren't for a business purpose.
18:43And so uh we haven't explicitly found that to be the case or that to be happening.
18:48Um, but the entire PCARD process is voluminous.
18:53Of course, when you add up multiple cards off multiple agencies and departments, um, it it just remains a significant area of risk, and uh you know, we're keeping an eye on the controls and approvals and processes in that area to make sure that everything remains compliant.
19:07You know, these are essentially credit cards given to certain employees that are charged with buying supplies or services for their particular job function.
19:15That's correct, yes.
19:16Anything you wouldn't you know procure through a traditional procurement process and setting up a contract with the vendor.
19:21Um, you know, it's everything from Amazon to uh microphones crew.
19:29Yeah, uh-huh, things that are that are kind of just uh a little lower dollar value.
19:35Any other questions from anyone?
19:37Yeah, Chair Reynolds.
19:38You mentioned um at the beginning earlier in your presentation that there were nine risk factors.
19:44You mentioned three of them.
19:46Can you list the other six?
19:49Uh I'm gonna challenge my knowledge here.
19:51So uh four of them are characters one through four.
19:55So the spin with our budgetary spin.
20:00So character one, for those that aren't aware, character one is personnel expenses, character two is materials and supplies.
20:07Uh character three uh is contractual services basically.
20:13Uh and then character four is with would capital be the way to say that capital kind of expenses, so desks, chairs, uh capital assets that will be um used by agencies and department.
20:25And so we excluded character five, which is chargebacks, because it's kind of more of a financial transaction.
20:30So those are the first four.
20:32Um we look at um employee tenure.
20:37So uh that's two of the categories.
20:39So number of employees less than, I'm sorry, percentage of employees per unit that are less than have less than two years of tenure, and then the number of employees percentage of employees that have over 10 years, I believe, of tenure, um, because there are significant, or I won't say significant, but specific risks for each of those groups.
20:58Um how many I add, is that six?
21:00Uh total federal grant expenditures is another.
21:04Um again, that is audited pretty heavily in the external audit.
21:09Um, but uh just with all the compliance regulations that are are put on grant funding, there is can be various risks associated with having more of that.
21:20And Heather, you can you help me out here?
21:24Uh in mismanagement tips, the uh review because we are the ones who are in charge of receiving those tips and processing those tips, so we include that information by department.
21:39Um trying to think of what the other ones are.
21:44Now I'm drawing the point too.
21:46Uh legal settlements.
21:49Legal uh payouts per department.
21:52And workers' compensation.
21:54So that's workers' compensation.
21:58I think that covers it perfectly.
22:00See, that's why they're so good.
22:02That's why uh introduced themselves.
22:06No, we we appreciate them.
22:07So that's there are obviously other things we could bake into that, and we look at other factors year in and year out, but those are the primary ones that we felt really drive significant financial risk, and so we use those to do our calculations.
22:21So are you prepared or in a position to tell the committee kind of the results and and what your plan looks like going forward, or at least initially?
22:32I mean, I'm not sure how you how you roll this out throughout the course of the year.
22:38And and as I get into the plan, it'll speak to that a little bit.
22:42Um, but uh in July, I'm happy to do a more detailed um breakdown for you of kind of how we got to the decisions we made for kind of the risk areas that we plan to address.
22:54Um we let this just a little more high level, but you'll see some of the carry-throughs and themes in kind of the planning for 2026 here.
23:08So as we look to the plan for the rest of the year, um, of course, we have our continuous kind of ongoing items.
23:15Uh the most the nearest, I guess that's about to kind of kick off is our external audit support.
23:21We uh each year we lend about 400 hours from the audit team to support of the external audit.
23:28We have been in contact with Forest Mazars on that.
23:30That is uh about to heat up very shortly.
23:33Um so we look forward to doing that.
23:35Of course, we continue our cash count activities where we make spontaneous visits to ages agencies and departments that handle cash and uh do a spontaneous review of their cash control handling and procedures.
23:48Uh we'll continue to administer our whistleblower tip line, so to speak.
23:53It's an online form where uh folks inside or outside the enterprise can make uh anonymous uh submissions based on uh things that they observe.
24:03Internal controls, of course, remains a priority uh between us and and OFM and um another member of other agencies.
24:11Uh you know, continuing to educate our folks.
24:14Forbus Mazars has been really a great partner in that and you know, offering our um internal controls training.
24:20Uh we've done one or two each year, and we're in discussions about how best to do that once the audit concludes for this year.
24:27Um again, the you know, next fall we'll be back in our risk assessment and um our internal kind of policies and procedures.
24:34Uh the internal institute of internal auditors uh has continuing updates on their standards, and so we review and make sure we're applying those as necessary to remain compliant with those those regulations.
24:47In terms of planned projects, uh, this is kind of where the tie-in to the risk assessment comes in.
24:52So, as I mentioned, we want to do kind of more targeted audits, which are risk-based reviews of processes across various agencies.
25:00Uh my next slide will get into the details of where we're gonna focus for this year, but that's gonna take up a chunk of time.
25:06We always leave a little bit of capacity for special projects and assessments.
25:11I feel like if you look at our time spend over the last couple years, that portion of it has increased, uh, which I think is good on a number of levels.
25:21I think it speaks to the confidence that our colleagues have in our our department and um also their awareness to areas that need further examination and overall that's that's just a good thing.
25:32So we always leave time for that.
25:35Uh the performance and innovation team, of course, is doing a great job with the indie performance program.
25:39Um the current session is winding down, um, but we'll have a summer twenty s six session as well as one in the fall.
25:47And they're also continuing to work on that change management training, which will be released in in quarter three.
25:53Any more questions on the plan?
25:56Thank you, Director.
25:57The the whistleblower administration.
26:00Can you just give us a little highlight on that recent activity, if any, in the past year of what kind of whistleblower complaints you typically receive or their nature?
26:13So the it's been a long process to get to where we are with this online form.
26:17We used to be recalled we used to have an actual hotline.
26:20It was a voicemail box, you would call and and leave the leave the details.
26:24That began to be abuse uh for a number of different reasons.
26:29We had, you know, um people calling in about a number of things that aren't related to city county business, and you know, when people Google whistleblower or p complaint, there's a number of things coming up.
26:41We come up, SBOA comes up, uh federal agencies come up, so sometimes they just kinda spray and pray, I think say they just send the same thing to different things.
26:50So a lot of those things don't apply to us.
26:52Um with kind of the abuse we had where we had uh someone um that was in a facility that was kind of calling incessantly with uh inappropriate messages basically.
27:02We felt it was best to kind of transition to something and provide it per present a little more structure so that people understood the types of complaints that we actually can field.
27:11So we worked with ISA to develop this online form, which still allows anonymous submissions, but has a lot of disclaimers about if this is not related to City of Indianapolis or Marion County, Indiana business, then here are some other areas in which you should direct your complaint.
27:30Um while that's helped some, we still the overwhelming majority of the complaints we get or submissions we get are not related to um city-county business.
27:41It's um the restaurant across the street, you know, plays music too loud or you know, items like that.
27:49Um there have been a couple of submissions that have um had some investigation and had some merit to them um largely related to behavior of of employees of specific departments kind of out in the community in the in the field, and so our process for those is to refer them to the appropriate party in that agency or department and uh they handle the action from there and we kind of just make sure that it's resolved.
28:16Um so outside of kind of just general uh employee misconduct, is there any other kind of bucket that would I'm not over selling this, but the percentage is extremely low of relevant complaints.
28:32I would say we're under 10%.
28:37And I do want to clarify too, when we were talking about for the risk assessment, the FLAN tips.
28:44This is the same thing.
28:45The whistleblower and the FAM tips are the same thing.
28:49Um but yeah, probably less than 10% of the tips we receive are ones that relate to anything within the city county, and even a small chunk of those are even actionable.
29:06Most of them are the details that are included, are not specific enough for anybody to even understand what complaint they're trying to make.
29:18Um, and they don't of course they have the option to remain remain anonymous, so we don't have the ability to follow up with them to ask for more specific details.
29:27Um so when that when those tips come, you know, we're kind of there's not really any action available to us at that point.
29:35Um, but then if there is ever anything that we do feel at least merits some attention, we make sure to forward it to um whichever agency would be appropriate to follow up on that.
29:48We have not received any tips that I can speak of anyways that would rise to a level that would require us as the OAP to investigate or perform any type of um audit uh around.
30:05So we're more or less just kind of a conduit for passing any relevant information on to the appropriate agency.
30:15If that helps, it does, thank you.
30:17Yeah, thank you, Mr.
30:22I would say more of a comment in regards to your special requests area.
30:28Um just to plant the seed, um, because I I think you guys do really do a good job looking into this, and I always use IHA as an example.
30:35You've always been uh very helpful in understanding you know what the story has looked like there.
30:40Um just something else that's come up, you know, in my line of experiences on the council has been the topic around public health, and one of those conversations locally um at least to city county employees, which is you know highly impactful to your area, um, is our DPC model or direct primary care.
31:00And it's under my understanding that I mean that the controller could probably confirm that you know we do have some upcoming contractual um opportunities on the selection of who that direct primary care provider is.
31:13And when I've had some of the conversations with uh executive leadership within the city, some of the concerns that we have is that we are paying for um duplicative uh services, and so specifically around um the the primary care part of it being uh multiple places to go get a physical, whether it be from the DPC model or through an insurance model, or even in some departments, uh the option can come through uh, and this is more on the public safety side, but through grants, and there's so there's three ways paying for you know, um go get an annual physical.
31:50Um we're paying for those up front.
31:52So that's one one side of that, there's duplicative triplicate triplicative um spending there.
31:58The second is that we're paying for it up front.
32:00And so we've got, and this is probably part more negotiation than anything, but just to see uh you know, out of curiosity from an audit standpoint of what is our cost on that.
32:09Um, if we are paying for folks to go get physicals and they're not getting them, how much are we doing?
32:17Utilization, so you know, as you know, uh just going through that topic of um special requests, knowing that there's a potential this year and next year, um, and opportunities to refine that, just ensuring that what we're paying for and what we're getting are you know, is they're not ever gonna be perfect, but is as close as possible, and at least having some insight before they jump into those conversations, I think would be really helpful for them, but also helpful for for us on the council to make sure that the employees and the families of those employees who work for or are part of the city council, uh city county, uh, have the most um you know bang for the buck as it comes to their health, and that we are considering their health as much as possible.
33:01Yeah, I appreciate that that comment.
33:03We candidly have not kind of gotten into that area yet, so that's I have heard some of the conversations are going on, and there's some contractual renewals and things like that, but that's something we can have some discussions with our colleagues with and see if there's anywhere we can provide some value.
33:27Uh so looking specifically at the on the audit side here, kind of some more details of our 2026 plan.
33:32Um we are of course are already into it.
33:36Um, you know, we've made some progress.
33:38Um I will start with the second bullet and then move move on.
33:44So as Vivian mentioned, our audit of the Office of Public Health and Safety Umgagement has completed.
33:54As we have not released the report yet, we are very close to doing so.
33:58It's literally the final final uh touches being put on it.
34:02Um I'm hesitant to share too too many details in a public forum, but I will give you some kind of general takeaways that I think are are not uh incendiary in any way.
34:12Um I would characterize the report as as not necessarily clean.
34:16Uh there are a number of findings, I believe there are eight total findings, um, six of which we classified as high risk.
34:24Uh the other two are moderate.
34:27They these findings kind of fall across a number of areas um in terms of kind of risk, controls, um a lot of things that govern kind of operational processes, um, they generally are not up to the level that they they should be.
34:45Um there are a lot of details within those, and I'm happy to kind of discuss any of those with you as as the report comes out, and once you have a take a chance to take a look at it.
34:53Um I will say to OPHS's credit, they've you know undergone a tremendous amount of growth, especially over the audit period we did, which was 2020 through 2025, essentially, uh 24 and a little bit to 25.
35:03Essentially, 24 and a little bit into 25.
35:07And so we were able to see a lot of progress across that period.
35:10You know, things have improved with different changes in processes and staffing and the like.
35:24And to help uh encourage and make that sure that gets done, we're going, we're planning to do uh kind of a more, we always do like a follow-up of some sort to kind of make sure that the management responses that are put in there for how they're gonna address findings are being progress is being made against them, and that's one of the things you know we report back to you on kind of each October.
35:45Um, but given the nature of some of the things that we found with OPHS, I think it's in their best in a benefit uh or in best interest if we do a more substantive kind of follow-up, um, which will take place later this this year once they're have another opportunity to kind of further implement some of the changes they've had.
36:04So once I get through the slide, happy to take any questions on that, but just wanted to kind of put some details around that since I know we've been talking about it for a while and there's been some questions.
36:13Umly, uh another tricky engagement is the is the audit of uh the human resources division.
36:20Um this one again uh has kind of been ongoing for a little bit, and given some of the numerous changes that took place within that division, uh the it was a bit of a perfect storm in some ways, in that the timing of our kind of completion of our field work and you know, discussion of findings was right at the time a lot of major changes were taking place within HR, and they were actually implementing a number of things to directly address the findings that we had, not necessarily in response to what we had found.
36:55Um they again the timing was close, but so those things were were ongoing and uh it was not reflective of the actual situation, I think, to release the report in the at that time based on the changes that were happening.
37:09So in order to kind of fully resolve that, um, we are going to go back in this year and um do an update basically since we've we finished our field work, address some of those things, and it will not be a complete revision of kind of the report, but it will update it for all relevant activities that have taken place across the lifespan since it first uh commenced.
37:31So that I believe will um give a much clearer picture of kind of where HR is that is at this point.
37:38So those are obviously two more notable kind of audits that have been going on for the last couple years, and so uh just wanted to give the committee a little insight on kind of where those are and how our approaches to to finish those up.
37:51And then additionally, um our audit team will plan to focus on a couple different areas.
37:57Uh apologies again to Madam Controller for how this is presented.
38:01Uh I think I gave her a little bit of a jump scare yesterday by having two OFM two OFM uh it's like three times on here.
38:11Um so this the plan again, going back to our kind of our risk-based approach, um how the city county operates for various reasons.
38:22There's just a tremendous amount of onus put on individual agencies and departments for compliance with a lot of these issues.
38:29That is not to say that purchasing or grants or HR or any of those functions that kind of oversee a lot of different areas are not doing a good job or not doing their job, but just by the very nature of how much work and how many dollars are spent, it it's very difficult for some of those oversight agencies to really have an understanding of every single element that goes into every contract and every that goes to for OCC as well.
38:53Um so while this is listed as OFM, it's not necessarily a direct audit or review of OFM purchasing or OFM grants.
39:00It's more so how agencies and departments are doing on their third-party vendor compliance.
39:06You know, are they holding vendors to the terms listed in the contracts?
39:10Are they you know paying on expenses that are are clearly stated in the scopes of work and we're making sure there's continuity across all those issues?
39:19Similarly with grants, you know, compliance is everything with grants.
39:22Um there's a huge reputational risk if we're not compliant with our grants and we lose potential opportunities for funding and so on and so forth.
39:30So again, we it was difficult to list this item without putting some sort of agency department with it.
39:38We just generally tagged OFM because they have involvement throughout those processes, but the actual focus of kind of our work will be on specific agencies and departments and their activities within these purchasing and grant areas.
39:54Any detailed questions on kind of the more detailed plan for 2026?
39:59Yes, Counselor Boots.
40:03I wasn't gonna ask a question, but now that you invited me.
40:06I'm putting everybody on the spot.
40:10You said the uh uh audit report for OPHS is soon forthcoming.
40:15Can you give us a little bit more of a definite timeline?
40:18Yes, so candidly, our hope was to have it already out by by today.
40:22Um and unfortunately that did not happen.
40:25Uh the some of the OPHS leadership, um, again, we met with them, was it last week?
40:29I believe, yeah, last week was our exit conference.
40:31We're all in agreement, we're on the same page, and other uh leaders are on the same page as well.
40:36So they literally just have some responses to edit, but they've been kind of out, they're key individuals that are doing those, and so um it will certainly be out by the end of March.
40:50Remind me if you will, Director Jones.
40:53Do those re individual reports from the audit reports as they come out, are they sent to committee members or at least are committee members notified with a link or something to be able to review those reports?
41:05Yes, yeah, I'm happy to send it directly to you.
41:07It will be up on our website um shortly after the kind of key parties internally have had a chance to see it.
41:14But um with this one, I'm happy to send it directly to the committee.
41:17Yeah, I guess I'm asking not necessarily specifically for this one.
41:22I I'm asking more generically on whether or not those are sent directly to the committee members as they are published.
41:30Yes, yeah, I think that's kind of best practice.
41:32I won't make you go to the website or make you click the link.
41:34So we'll we'll just send them directly as we finish reports, send them directly to the committee.
41:44That was kind of the the the meat of our our uh report again.
41:48Just kind of a lot lot going on.
41:50Um, and we're uh excited kind of about the progress and things that are being made, but there's a lot to tackle.
41:56Um but we have a great team and great staff, and so we're looking forward to to continue to do that in 2026.
42:04Other questions from committee members.
42:10I will let the committee members know that I did um have a brief meeting with um the external auditors um just as a prep for as they were coming in.
42:23You may have noticed that on the 25 when Deputy Director Agnew did the presentation of 2025, there was a presentation last March by four of us kind of saying here's what we're here's our plan.
42:38Um this year we took it kind of as the chairman will take one for the team and the chairman will sit down with four of us and kind of talk about their plan and and make sure everything's going there.
42:51Uh we had we had a good discussion about what their plan is, very consistent uh to what they've done in the past.
42:57So that has occurred.
42:59They're they're ready to go and and look forward to the July meeting where when they'll come back to the committee and give us the results of the of the presentation.
43:07So just wanted the committee to know that.
43:10Any other thoughts, comments, questions, concerns?
43:15I love efficient meetings.
43:18We aim to please all right.
43:20As a reminder, then our next meeting will be July 31st uh 2026, 9 a.m.
43:28Main focus should be the um results of the external audit, um, which should be the focus of that meeting.
43:36So and obviously if there's any issues that come up during that time frame or during the audit, if if um I mean I'm available if if you need any assistance from the committee, or we can certainly reach out to any committee members if if necessary.
43:54All right, very good.
43:55Can I have a motion on adjournment?
43:57So moved second, been moved and seconded.