Mission

Mission

The mission of the Office of Internal Audit is to provide independent, objective audit/review and risk assessment services designed to add value and improve the operations of the Maryland-National Capital Park and Planning Commission (M NCPPC). It helps the M-NCPPC accomplish its objectives by bringing a systematic, disciplined approach to evaluate and improve the effectiveness of governance, risk management, and internal control processes, compliance with all applicable rules and regulations and reliable financial reporting.

For purposes of this document, M-NCPPC (the agency) means all departments, facilities, and affiliated organizations.

Scope

The scope of work of the Internal Audit is to determine whether the Commission’s risk management, control, and governance processes, as designed and represented by management, are adequate and functioning in a manner to ensure:

1. Risks are appropriately identified and managed.
2. Interaction with the various governance groups occurs as needed.
3. Significant financial, managerial, and operating information is accurate, reliable, and timely.
4. Operations are in compliance with the Commission’s policies, standards, procedures, and applicable laws and regulations.
5. Resources are acquired economically, used efficiently, and adequately protected.
6. Programs, plans, and objectives are achieved.
7. Quality and continuous improvement are fostered in the organization’s control process.
8. Significant legislative or regulatory issues impacting the organization are recognized and addressed properly.

Accountability

The Office of Internal Audit Chief shall be accountable to the Chair, Vice Chair of the Commission and the Audit Committee to:

1. Report significant issues related to the processes for controlling the activities of the Commission and its affiliates, including potential improvements to those processes, and provide information concerning such issues.
2. Provide information periodically on the status and results of the annual audit plan and the sufficiency of Internal Audit resources.

Responsibility

The Internal Audit Division Manager and staff of Internal Audit have responsibility to:

1. Develop a flexible annual audit plan using appropriate risk-based methodology, including any risks or control concerns identified by management, and submit that plan to the Secretary-Treasurer and the Audit Committee for review and approval.
2. Implement the annual audit plan, as approved, including, and as appropriate, any special tasks or projects requested by the Secretary-Treasurer and the Audit Committee.
3. Maintain a professional audit staff with sufficient knowledge, skills, experience, and professional certifications to meet the requirements of the Commission.
4. Establish a quality assurance program by which the Internal Audit Division Manager assures the operation of internal auditing activities.
5. Evaluate and assess new or changing services, processes, operations, and controls concurrent with their development, implementation, and/or expansion.
6. Determine how efficiently and effectively the departments are carrying out their functions of planning, organizing, directing and controlling.
7. Determine the reliability and integrity of financial information and the means used to identify measure, classify and report such information.
8. Determine the adequacy and effectiveness of the systems of internal accounting and operating controls.
9. Review established systems to ensure compliance with those laws regulations, policies, plans and procedures, which could have a significant impact on operations and reports, and determine whether the organization is in compliance.
10. Review the means of safeguarding assets and, as appropriate, verify the existence of such assets.
11. Appraise the economy and efficiency, with which resources are employed, identify opportunities to improve operating performance, eliminate waste and duplication, and recommend solution to problems where appropriate.
12. Review operations and programs to ascertain whether results are consistent with established objectives and goals and whether the operations or programs are being carried out as planned.
13. Perform consulting services, beyond internal auditing assurance services, to assist management in meeting its objectives. These may include facilitation, process design, training, and advisory services.
14. Coordinate Internal Audit efforts with those of the Commission’s external auditors.
15. Participate in the planning, design, development, implementation and operation of major computer-based systems to determine whether
    (a) adequate controls are incorporated in the systems,
    (b) thorough system testing is performed at appropriate stages,
    (c) system documentation is complete and accurate, and
    (d) the needs of user departments are met. Conduct post-installation evaluations of major data processing systems to determine whether these systems meet their intended purposes and objectives.
16. Review compliance with the Commission’s guidelines for ethical business conduct and ensure that the highest standards of personal performance are met.
17. Maintain regular contact with the Secretary-Treasurer to share concerns, problems and/or opportunities identified in the audit reports to facilitate timely remedial or other action.
18. Report to the Audit Committee, Secretary-Treasurer and those members of management who should be informed, or who would take corrective action, the results of audit examinations, the opinions formed, and the recommendations made.
19. Evaluate any plans or actions taken to correct reported conditions for satisfactory disposition of audit findings. If the corrective action is considered unsatisfactory, hold further discussions to achieve acceptable disposition.
20. Provide adequate follow-up to make certain appropriate corrective action is taken and that it is effective.
21. Conduct quality assurance peer reviews.
22. Perform special projects at the request of the Audit Committee and Secretary-Treasurer.
23. Issue periodic reports to the Audit Committee and the Secretary-Treasurer summarizing results of audit activities.
24. Inform the Audit Committee and the Secretary-Treasurer of emerging trends and successful practices in internal auditing.
25. Provide a list of significant measurement goals and results to the Audit Committee and the Secretary – Treasurer.
26. Assist in the investigation of significant suspected fraudulent activities within the Commission and notify the Audit Committee and the Secretary-Treasurer the results.

Authority

The Internal Audit Division Manager and staff of Internal Audit are authorized to:

Limitation of Authority

The Internal Audit Division Manager and staff of Internal Audit are not authorized to:

1. Perform any operational duties for the organization or its affiliates.
2. Initiate or approve financial transactions external to Internal Audit.
3. Direct the activities of any organization employee not employed by Internal Audit, except to the extent such employees have been appropriately assigned to auditing teams or to otherwise assist the internal auditors.
4. In performing their functions, the Internal Audit Director and staff have no direct authority over, or responsibility for, any of the activities reviewed.
5. Internal auditors will not develop and implement procedures, make management decisions, or engage in any other activity which could be reasonably construed to compromise their independence.