2012 state audit of the Riverhead Charter School

24
D IVISION OF LOCAL GOVERNMENT & SCHOOL ACCOUNTABILITY O FFICE OF THE N EW Y ORK S TATE C OMPTROLLER Report of Examination Period Covered: July 1, 2010 — December 31, 2011 2012M-164 Riverhead Charter School Fiscal Monitoring, Leave Accruals and Information Technology Thomas P. DiNapoli

description

2012 state audit of the Riverhead Charter School

Transcript of 2012 state audit of the Riverhead Charter School

Page 1: 2012 state audit of the Riverhead Charter School

DIVISION OF LOCAL GOVERNMENT & SCHOOL ACCOUNTABILITY

O F F I C E O F T H E N E W Y O R K S T A T E C O M P T R O L L E R

Report of ExaminationPeriod Covered:

July 1, 2010 — December 31, 2011

2012M-164

Riverhead Charter School

Fiscal Monitoring, LeaveAccruals and Information

Technology

Thomas P. DiNapoli

Page 2: 2012 state audit of the Riverhead Charter School

11DIVISION OF LOCAL GOVERNMENT AND SCHOOL ACCOUNTABILITY

Page

AUTHORITY LETTER 2

EXECUTIVE SUMMARY 3

INTRODUCTION 5 Background 5 Objective 5 Scope and Methodology 6 Comments of School Offi cials and Corrective Action 6

FISCAL MONITORING 7 Annual Budget 7 Financial Reports 8 Recommendations 9

LEAVE ACCRUALS 11 Recommendations 14

USER ACCESS TO THE FINANCIAL SOFTWARE 15 Recommendations 16

APPENDIX A Response From School Offi cials 17APPENDIX B Audit Methodology and Standards 20APPENDIX C How to Obtain Additional Copies of the Report 22APPENDIX D Local Regional Offi ce Listing 23

Table of Contents

Page 3: 2012 state audit of the Riverhead Charter School

2 OFFICE OF THE NEW YORK STATE COMPTROLLER2

State of New YorkOffi ce of the State Comptroller

Division of Local Governmentand School Accountability

December 2012

Dear School Offi cials:

A top priority of the Offi ce of the State Comptroller is to help school offi cials manage government resources effi ciently and effectively and, by so doing, provide accountability for tax dollars spent to support School operations. The Comptroller oversees the fi scal affairs of public schools statewide, as well as compliance with relevant statutes and observance of good business practices. This fi scal oversight is accomplished, in part, through our audits, which identify opportunities for improving operations and School Board governance. Audits also can identify strategies to reduce costs and to strengthen controls intended to safeguard school assets.

Following is a report of our audit of Riverhead Charter School, entitled Fiscal Monitoring, Leave Accruals and Information Technology. This audit was conducted pursuant to Article V, Section 1 of the State Constitution and the State Comptroller’s authority as set forth in Section 2854 of the Education Law.

This audit’s results and recommendations are resources for school offi cials to use in effectively managing operations and in meeting the expectations of taxpayers, students and their parents. If you have questions about this report, please feel free to contact the local regional offi ce for your county, as listed at the end of this report.

Respectfully submitted,

Offi ce of the State ComptrollerDivision of Local Governmentand School Accountability

Page 4: 2012 state audit of the Riverhead Charter School

33DIVISION OF LOCAL GOVERNMENT AND SCHOOL ACCOUNTABILITY

State of New YorkOffi ce of the State Comptroller

EXECUTIVE SUMMARY

A charter school is a public school fi nanced by local, State and Federal resources that is not under the control of the local school board and is governed under Education Law Article 56. The Riverhead Charter School (School) is located in the Town of Riverhead and is governed by the Board of Trustees (Board), which comprises seven members. The Board is responsible for the general management and control of the School’s fi nancial and educational affairs. The Principal is the chief executive offi cer and is responsible, along with other administrative staff, for the day-to-day management of the School under the direction of the Board. The Director of Finance and Operations (Director) is the chief accounting offi cer and is responsible for maintaining custody of, depositing, and disbursing School funds, maintaining the fi nancial records, and preparing the monthly and annual fi nancial reports.

Charter schools have fewer legal operational requirements than traditional public schools. Most of the regulations for a charter school are contained in the entity’s by-laws, charter agreement, and the fi scal/management plans, which are part of the charter school application.1 A charter school is required to set both fi nancial and academic goals, and the renewal of the charter every fi ve years is dependent on the school meeting these goals. The School’s current charter was renewed in April 2009 and was effective July 1, 2009.

The School’s 2010-11 fi scal year operating expenditures totaled approximately $3.5 million. These expenses were funded primarily with revenues derived from billing the resident school districts for resident pupils and from certain State and Federal aid attributable to these pupils. The School had approximately 260 enrolled students and 40 employees as of June 30, 2011. Scope and Objective

The objective of our audit was to determine whether the Board provided adequate oversight of the School’s fi nancial operations and to assess the internal controls over leave accruals and access to the fi nancial software for the period July 1, 2010 to December 31, 2011. Our audit addressed the following related questions:

• Has the Board appropriately monitored the School’s annual budget and fi nancial activities?

• Have School employees received and used leave benefi ts in accordance with the School’s policy, contracts, and/or collective bargaining agreements?

____________________1 The School’s charter is authorized by the New York State Board of Regents.

Page 5: 2012 state audit of the Riverhead Charter School

4 OFFICE OF THE NEW YORK STATE COMPTROLLER4

• Are access controls over the fi nancial software application appropriately designed and operating effectively?

Audit Results

The Board’s inadequate monitoring of fi nancial operations resulted in budget errors, inaccurate leave accruals and payments, and an increased risk of unauthorized access to the School’s fi nancial system.

The Board did not approve the 2011-12 annual budget by June 1, 2011 as required, and the Director did not make any amendments to the budget to refl ect variances in revenues and expenditures during the year. We found discrepancies among the fi scal year 2011-12 budget submitted to the New York State Education Department (SED), the Board-approved budget, and budgetary amounts in the School’s budget-to-actual report. Further, the Board did not receive and review quarterly balance sheets, budget-to-actual reports, or monthly cash receipts reports. We also found that four actual revenue items totaling $56,343 and six actual expenditure items totaling $42,739 were not in the budget for the 2010-11 fi scal year. Without receiving the information it needs for properly monitoring and amending the budget, the Board cannot make informed fi nancial decisions in the School’s best interest. Additionally, leave accrual balances maintained by the payroll clerk were not reviewed for accuracy or reconciled to leave balances on employees’ pay stubs after processing by the School’s payroll vendor. As a result, the sick leave balances for the six employees in our sample were all either overstated (by a total of 19.5 hours) or understated (by a total of 77 hours), and the vacation leave of three of those employees was overstated by a total of 72 hours. We also found one employee was overpaid $570 for unused vacation leave. Further, the School’s records were not suffi cient for us to confi rm the accuracy of the Principal’s leave accruals. The lack of accurate accrual records and adequate oversight of the leave accrual system is a signifi cant internal control weakness. As a result, the School has paid employees for leave time to which they are not entitled and continues to be at risk of making these errors.

Finally, we found that the School’s fi nancial software application has one user account and does not require the use of a password. The user account is a default administrator account which has powerful capabilities such as adding new users, changing users’ access rights, and controlling all aspects of the fi nancial software. This account is used by the Director of Operations and Finance, an account clerk, and the School’s external accounting fi rm; further, one computer is located in a generally accessible room and, if left on, could potentially allow anyone to access the fi nancial application. Lastly, administrative rights to the fi nancial system should be limited to authorized personnel who are not involved in the School’s fi nancial operations. As a result of these control defi ciencies, the fi nancial system is vulnerable to unauthorized use and there is an increased risk of inappropriate transactions that may not be detected.

Comments of School Offi cials

The results of our audit and recommendations have been discussed with School offi cials and their comments, which appear in Appendix A, have been considered in preparing this report. School offi cials generally agreed with our recommendations and indicated they have taken or plan to take corrective action.

Page 6: 2012 state audit of the Riverhead Charter School

55DIVISION OF LOCAL GOVERNMENT AND SCHOOL ACCOUNTABILITY

Background

Introduction

Objective

A charter school is a public school fi nanced by local, State and Federal resources that is not under the control of the local school board and is governed under Education Law Article 56. The Riverhead Charter School (School) is located in the Town of Riverhead and is governed by the Board of Trustees (Board), which comprises seven members. The Board is responsible for the general management and control of the School’s fi nancial and educational affairs. This responsibility includes adopting a timely budget and monitoring the School’s fi nancial operations. The Principal is the chief executive offi cer of the School and is responsible, along with other administrative staff, for the day-to-day management of the School under the direction of the Board. The Director of Finance and Operations (Director) is the chief accounting offi cer and is responsible for maintaining custody of, depositing, and disbursing School funds, maintaining the fi nancial records, and preparing the monthly and annual fi nancial reports for Board review. The Director is also responsible for making budget amendments throughout the year, based on budget-to-actual reports, and submitting the amendments for Board approval. The payroll clerk, under the direction of the Director, is responsible for performing all payroll functions including maintaining leave accrual balances.

Charter schools have fewer legal operational requirements than traditional public schools. Most of the regulations for a charter school are contained in the entity’s by-laws, charter agreement, and the fi scal/management plans, which are part of the charter school application.2 A charter school is required to set both fi nancial and academic goals, and the renewal of the charter every fi ve years is dependent on the school meeting these goals. The School’s current charter was renewed in April 2009, effective July 1, 2009.

The School’s 2010-11 fi scal year operating expenditures totaled approximately $3.5 million. These expenses were funded primarily with revenues derived from billing the resident school districts for resident pupils and from certain State and Federal aid attributable to these pupils. The School had approximately 260 enrolled students and 40 employees as of June 30, 2011.

The objective of our audit was to determine whether the Board provided adequate oversight of the School’s fi nancial operations and to assess the internal controls over leave accruals and access

____________________2 The School’s charter is authorized by the New York State Board of Regents.

Page 7: 2012 state audit of the Riverhead Charter School

6 OFFICE OF THE NEW YORK STATE COMPTROLLER6

Comments of School Offi cials and Corrective Action

to the fi nancial software. Our audit addressed the following related questions:

• Has the Board appropriately monitored the School’s annual budget and fi nancial activities?

• Have School employees received and used leave benefi ts in accordance with the School's policy, contracts, and/or collective bargaining agreements?

• Are access controls over the fi nancial software application appropriately designed and operating effectively?

We evaluated Board oversight, examined the use and recording of leave benefi ts, and reviewed access controls to the fi nancial software for the period July 1, 2010 to December 31, 2011.

We conducted our audit in accordance with generally accepted government auditing standards (GAGAS). More information on such standards and the methodology used in performing this audit are included in Appendix B of this report.

The results of our audit and recommendations have been discussed with School offi cials and their comments, which appear in Appendix A, have been considered in preparing this report. School offi cials generally agreed with our recommendations and indicated they have taken or plan to take corrective action.

The Board has the responsibility to initiate corrective action. We encourage the Board to prepare a plan of action that addresses the recommendations in this report, and to forward the plan to our offi ce within 90 days. For more information on preparing and fi ling your CAP, please refer to our brochure, Responding to an OSC Audit Report, which you received with the draft audit report. We encourage the Board to make this plan available for public review in the School’s administrative offi ce.

Scope andMethodology

Page 8: 2012 state audit of the Riverhead Charter School

77DIVISION OF LOCAL GOVERNMENT AND SCHOOL ACCOUNTABILITY

Fiscal Monitoring

The Board is responsible for managing and overseeing the School’s overall fi scal affairs. This responsibility includes establishing a system of internal controls to provide reasonable assurance that resources are properly safeguarded. Effective policies and procedures help guide specifi c areas of fi scal operations, including the adoption of a timely budget and continuous monitoring of budgeted versus actual revenues and expenditures. Any amendments to the budgets must be approved by the Board and noted in the meeting minutes. Complete and accurate monthly reports provide essential fi nancial information the Board can use to monitor the School’s fi nancial condition and compliance with the adopted budget.

The School’s charter contains internal fi nancial control policies and procedures that outline the Board’s fi scal oversight responsibilities. These include approving the annual budget by June 1 of the immediately preceding fi scal year, approving any amendments to the budget, comparing year-to-date revenues and expenditures to the budget, and reviewing signifi cant variations on a quarterly basis. The Board is also supposed to receive and review a detailed reporting of asset, liability, revenue and expense accounts on a quarterly basis and review all cash receipts monthly, including a comparison of amounts received to the budget.

The Board did not approve the 2011-12 annual budget by June 1, 2011 as required, and the Director did not make any amendments to the budget to refl ect variances in revenues and expenditures during the year. We found inconsistencies among the fi scal year 2011-12 budget submitted to the New York State Education Department (SED), the Board-approved budget, and the amounts in the School’s budget-to-actual report dated December 31, 2011. Further, the Board did not receive and review quarterly balance sheets, monthly budget-to-actual reports, or monthly cash receipts reports. Without receiving the information it needs for properly monitoring and amending the budget, the Board cannot make informed fi nancial decisions.

The Board is responsible for adopting realistic, structurally balanced annual operating budgets. Effective budgetary controls limit expenditures to the specifi c purposes and amounts authorized by the Board, including any budget amendments. The School’s charter contains various fi nancial policies and procedures that outline the Board’s budgeting responsibilities. The Board and the Principal, as head of the school, are required to provide fi scal oversight, including establishing policies and procedures for managing the School’s fi nances.

Annual Budget

Page 9: 2012 state audit of the Riverhead Charter School

8 OFFICE OF THE NEW YORK STATE COMPTROLLER8

The Board’s meeting minutes showed that the budget for the 2011-12 year was approved at the June 28, 2011 meeting, one month after the required date. Further, the minutes had no details of budget revenues or expenses, and there was no copy of the budget attached. The Director does not make any amendments to the budget to refl ect the variances in revenues and expenditures during the year, and told us that she monitors the bottom line without making any adjustments to individual expenditure lines. Therefore, the Board does not have suffi cient information to monitor the budget or determine whether it is structurally balanced.

We found inconsistencies between the fi scal year 2011-12 budget, submitted with the 2010-11 annual report to SED in July 2011, and the 2011-12 budget that School offi cials told us was approved by the Board. In addition, we reviewed a budget-to-actual report dated December 31, 2011 and found that the budgeted amounts for the fi scal year also varied from the Board-adopted budget. There was no evidence that the Board approved amendments to the budget.

Financial Reports

Table 1: Fiscal Year 2011-12 Budget InconsistenciesBoard-Approved Submitted to SED Budget at 12/31/11a

Revenues $4,096,906 $4,058,209 $4,056,104Expenditures $4,093,614 $4,047,974 $4,055,134a These amounts refer to the budget for the entire fi scal year, as shown in the School’s budget-to-actual report dated December 31, 2011.

Further, the budget-to-actual report for the 2010-11 fi scal year included four actual revenue items totaling $56,343 and six actual expenditure items totaling $42,739 that were not budgeted. These included routine items such as interest earned, bank charges, and bonuses. School offi cials did not have an explanation for these budget omissions.

Although the School is currently in good fi nancial condition, this does not diminish the importance of the Board adopting timely, realistic budgets, monitoring the adopted budget, and amending it as needed.

It is essential that the Board receive regular fi nancial reports from the Director to fulfi ll its responsibility of monitoring fi nancial operations. The Board should routinely review reports of budget status, amounts received and disbursed during the month, and totals for balance sheet categories.

The School’s policy states that the Director shall prepare monthly balance sheets and statements of activity and present these fi nancial statements to the Board each quarter for its review. These statements are to include a detailed reporting of asset, liability, revenue and

Page 10: 2012 state audit of the Riverhead Charter School

99DIVISION OF LOCAL GOVERNMENT AND SCHOOL ACCOUNTABILITY

expense categories, and a comparison between year-to-date actual and year-to-date budget data. Monthly budget status reports enable the Board to identify and discuss signifi cant variations and determine whether budget amendments may be necessary. In addition, the policy requires the Board to review all cash receipts monthly and compare amounts received to the budget.

Our review of Board meeting minutes found that the fi nancial reports provided to the Board contained only the School’s bank account balances, year-to-date receivables (including delinquent accounts), and student enrollment numbers. The Board did not receive quarterly balance sheets and statements of activity detailing asset, liability, revenue, and expense categories, and did not receive a report of cash receipts comparing amounts received to the budget. The lack of this critical information precludes the Board from properly monitoring the School’s fi nances.

We randomly selected the month of February 2011 to determine whether cash receipts3 were deposited and accounted for, and found no exceptions. We also randomly selected two months’ bank statements (September 2010 and April 2011) to determine whether wire transfers were properly authorized and supported and for valid School purposes. There were four wire transfers in September 2010 for loan payments totaling $103,069 and two transfers in April 2011 totaling $51,534. All transfers were properly authorized and supported and for valid School purposes.

Although we found no exceptions, when the Board is not provided with periodic fi nancial and budget-to-actual reports, it cannot properly monitor the School’s fi scal operations. Therefore, Board members cannot be assured that the School’s funds are expended in the manner intended.

1. The Board should approve the budget by June 1 of the previous fi scal year and maintain a copy of the approved budget with the minutes.

2. The Director should prepare, and the Board should review and approve, any necessary changes and/or amendments to the budget. These approved changes and/or amendments should be noted in the minutes.

3. The Board and Director should follow the fi nancial control policies contained in the School’s charter. The Director should prepare and the Board should review monthly balance sheets,

Recommendations

____________________3 The cash receipts for that month totaled $538,289, with tuition accounting for $483,649 (90 percent).

Page 11: 2012 state audit of the Riverhead Charter School

10 OFFICE OF THE NEW YORK STATE COMPTROLLER10

statements of activity, budget-to-actual status of revenues and expenditures, and cash receipts reports. Reports provided should be noted in the minutes and copies attached.

Page 12: 2012 state audit of the Riverhead Charter School

1111DIVISION OF LOCAL GOVERNMENT AND SCHOOL ACCOUNTABILITY

Leave Accruals

Leave accruals represent time off earned by employees. The accumulation of leave time is driven by collective bargaining agreements, individual employment contracts, and/or Board- approved policies, which should clearly stipulate each employee’s entitlement to leave benefi ts. A good system of internal controls ensures that employee leave accruals are granted in accordance with applicable employment contract provisions and that records are kept of each employee’s time off to ensure accuracy. Periodic independent reviews of leave time accrual records and balances throughout the year provide an additional control to help ensure that employees receive and use the correct leave to which they are entitled. When there is more than one recordkeeping system – for example, manual payroll records and system-generated payroll balances – a periodic reconciliation of the two records can verify that all leave accruals and usages are recorded and the balances agree. The School uses a payroll company to process its payroll.

The School has three classifi cations of employees in relation to paid leave benefi ts:

• Twelve-month, full-time, administrative employees

• Instructional staff

• Principal.

Twelve-month, full-time administrative employee leave benefi ts are defi ned in the School’s employee handbook. These employees are entitled to 12, 15, or 20 vacation days a year based on their years of employment. During our audit period there were four 12-month full-time regular employees who were entitled to the minimum of 12 vacation days a year. According to the employee handbook, vacation time is accrued at 3.693 hours per biweekly pay period and is earned on the last calendar day of each month. If vacation time is not used within the calendar year it is earned, the employee may accrue up to a year and a half of vacation days. Upon separation from the School, an employee with unused vacation time may receive payment for the accrued time at his or her current base rate of pay for up to one year’s accrual. In addition, 12-month, full-time administrative employees earn two personal days and eight sick days each year. Unused personal days can be carried over from one year to the next as accumulated sick days. The maximum number of sick and personal days that may be carried over is a combined 70 days a year. Employees will not be paid for unused personal or sick days upon separation.

Page 13: 2012 state audit of the Riverhead Charter School

12 OFFICE OF THE NEW YORK STATE COMPTROLLER12

Leave benefi ts for the School’s instructional staff are defi ned in a collective bargaining agreement. Instructional staff earn nine paid sick leave days and three paid personal days a year. Unused personal days may be rolled over to the following school year as accumulated sick days, which may be used in addition to the employee’s annual sick leave entitlement for that year. Instructional staff do not earn any vacation time.

The Principal’s leave benefi ts are outlined in her employment contract, which allows for leave benefi ts to be awarded in accordance with the Riverhead Charter School Teachers’ contract. However, if the Principal does not use all her personal days, they do not roll over to the subsequent year. In addition, the Principal is entitled to three weeks of vacation during the summer recess. If the Principal does not use all vacation days from the school calendar year, she can use vacation time during the summer recess.

School policy requires that employee time sheets be maintained daily, signed by the employee, approved by a supervisor, and forwarded to the payroll clerk at the end of the payroll period. The policy also requires that employee use of accrued leave be recorded, accounted for, and maintained by the payroll clerk, but does not require review or reconciliation of balances. All employees, with the exception of the Principal and Director, submit signed time sheets to the payroll clerk, showing the hours worked and any leave time used for the pay period. The Principal reviews and signs each time sheet. The payroll clerk summarizes the hours worked and leave taken for each employee, and the Director reviews this summary sheet and releases the payroll for submission to the payroll company for processing. Each individual employee paycheck stub includes the employee’s leave accrual balances, but there is no leave accrual balance report provided with the biweekly payroll.

The payroll clerk maintains a separate spreadsheet with employees’ leave balances and enters the sick, personal, and vacation hours taken for each pay period. At the beginning of each School year, the payroll clerk prepares a schedule for sick, personal, and vacation accruals. These accruals and any adjustments made, due to unused personal time being rolled over to sick time, are added to the leave balances. However, no one reviews the report or adjustments maintained by the payroll clerk for accuracy or reconciles this schedule to the balances recorded on the employee’s paycheck stub.

We selected all fi ve employees, including the Principal and Director, entitled to vacation time during our audit period and tested the accuracy of their sick, personal, and vacation leave accruals. In addition, we selected two teachers, one with the highest sick leave

Page 14: 2012 state audit of the Riverhead Charter School

1313DIVISION OF LOCAL GOVERNMENT AND SCHOOL ACCOUNTABILITY

balance and the other with the lowest, for the last pay period in our audit period. We compared the employee timesheets to the payroll summary sheet prepared by the payroll clerk, the payroll register generated by the payroll system, and the leave balances maintained by the payroll clerk.

We could not confi rm the accuracy of the Principal’s leave accruals because the School’s records were not suffi cient to calculate her leave balances. For the remaining six employees, sick leave balances were inaccurate: three had more sick time than they were entitled to and three had less. Two of the six employees’ personal leave balances were more than they were entitled to. Of the four employees in our sample who were entitled to vacation leave, three had more vacation time than they were entitled to. Table 2 details the difference between the School’s leave balances and the balances we calculated for the six employees:

Table 2: Leave Balances (Hours) for Audit Period School Records OSC Calculation Overstatement/(Understatement)

EmployeeSick

LeavePersonal

LeaveVacation

LeaveSick

LeavePersonal

LeaveVacation

LeaveSick

LeavePersonal

LeaveVacation

Leave1 97 8 38 107 8 6 (10) 0 322 302 16 224 294 0 200 8 16 243 74 8 121 78 8 105 (4) 0 164 42 16 98 38.5 8 98 3.5 8 05a 408 24 N/A 471 24 N/A (63) 0 N/A6a 8 24 N/A 0 24 N/A 8 0 N/A

a These employees were not entitled to vacation leave.

In addition, two employees received termination payments for unused vacation time during our audit period. Because the School’s vacation leave accruals were not accurate, one employee was overpaid $570 for unused vacation time.4 Although the School paid the other employee for the correct maximum of 96 hours allowed by the employee handbook, it used an incorrect daily pay rate of $119.23 instead of the correct rate of $115.39. The School’s record of this employee’s unused vacation leave also was incorrect, showing a balance of 121 hours whereas the actual balance was 105 hours.

The lack of accurate accrual records and adequate oversight of the leave accrual system is a signifi cant internal control weakness. As a result, the School has paid employees for leave time to which they are not entitled and continues to be at risk of making these errors.

____________________4 This employee received a termination payment of $677 on December 30, 2011, for 38 hours of unused vacation leave. However, the employee’s last day of employment was October 11, 2011, at which time he had six hours of unused vacation time; therefore, his payment should have been $107.

Page 15: 2012 state audit of the Riverhead Charter School

14 OFFICE OF THE NEW YORK STATE COMPTROLLER14

4. The Board should establish written procedures to address the maintenance of leave time records and ensure that accurate information for time accruals is maintained, monitored, in accordance with appropriate contracts and/or policy, and periodically reconciled.

5. Payments for unused leave time should be made only after proper approval and verifi cation of accrual balances based on adequate supporting records.

6. The Board and School offi cials should review and correct all leave records.

7. The Board should ensure that the incorrect payments identifi ed in this report, as well as any other overpayments identifi ed by the School’s review, are recovered.

Recommendations

Page 16: 2012 state audit of the Riverhead Charter School

1515DIVISION OF LOCAL GOVERNMENT AND SCHOOL ACCOUNTABILITY

User Access to the Financial Software

The Board is responsible for establishing and implementing internal controls over access to fi nancial software applications. To control access, computer systems and applications need a process to identify and establish relationships between the user and the application. Administrative rights – which allow powerful capabilities such as adding new users, changing users’ access rights, and having control over all aspects of the School’s fi nancial software – should be limited. Pre-installed default accounts, which give users administrative rights, should be disabled or renamed by authorized IT personnel. Financial software applications should include suffi cient controls to protect School data, such as the ability to establish separate user accounts requiring unique passwords, and users should have only the minimum access necessary to perform their day-to-day duties. The fi nancial software administrator should not be involved in the School’s fi nancial operations. If it is not possible to segregate these responsibilities, managerial oversight can help ensure accuracy of the fi nancial data. Periodic review of audit logs (automated trails of user activity) and void/deletion reports (indicating voided transactions and deleted data) are ways to ensure that only authorized users have access and are performing only those functions they need for doing their jobs.

The School’s fi nancial software application has one user account and does not require the use of a password. The user account identifi er (ID) is ADMIN, a default administrator account, which allows anyone to enter data after accessing the application. The fi nancial application is installed on two computers: a desktop computer in the boardroom of the Administration Building and the laptop computer used by the Director of Operations and Finance. Although the boardroom computer is password-protected at the network level – requiring a user to fi rst sign onto the network using a unique password – once on the network, a user can access the software application using just the shared default ID. We were told that users include the Director of Operations and Finance, an account clerk, and the School’s external accounting fi rm. Given the boardroom location, which is used for meetings, there is a risk that this computer could remain connected to the network during the day, potentially enabling others to access the fi nancial software through the shared default account ID.

Because all users in the fi nancial software application use the same user account that does not require a password and gives them administrative rights, the system is vulnerable to unauthorized use. As a result, there is an increased risk that inappropriate transactions could be initiated and not be detected.

Page 17: 2012 state audit of the Riverhead Charter School

16 OFFICE OF THE NEW YORK STATE COMPTROLLER16

8. Users of the fi nancial software should have their own unique user IDs and passwords.

9. The administrator for the fi nancial software should be someone who is not involved in the School’s fi nancial operations.

Recommendations

Page 18: 2012 state audit of the Riverhead Charter School

1717DIVISION OF LOCAL GOVERNMENT AND SCHOOL ACCOUNTABILITY

APPENDIX A

RESPONSE FROM SCHOOL OFFICIALS

The School offi cials’ response to this audit can be found on the following pages.

Page 19: 2012 state audit of the Riverhead Charter School

18 OFFICE OF THE NEW YORK STATE COMPTROLLER18

Page 20: 2012 state audit of the Riverhead Charter School

1919DIVISION OF LOCAL GOVERNMENT AND SCHOOL ACCOUNTABILITY

Page 21: 2012 state audit of the Riverhead Charter School

20 OFFICE OF THE NEW YORK STATE COMPTROLLER20

APPENDIX B

AUDIT METHODOLOGY AND STANDARDS

Our overall goal was to assess the adequacy of the internal controls put in place by offi cials to safeguard School assets. In order to accomplish this, we performed an initial assessment of School operations so that we could design our audit to focus on those areas most at risk. Our initial assessment included evaluations of the following areas: general governance, fi nancial condition, Board oversight, cash receipts, payroll and personal services, cash disbursements, purchasing, capital assets and inventories, and information technology.

During the initial assessment, we interviewed School offi cials and employees, performed limited tests of transactions, and reviewed pertinent documents such as adopted policies and procedures, Board minutes, and fi nancial records and reports. After reviewing the information gathered during our initial assessment, we determined where weaknesses existed, and evaluated those weaknesses for inherent control risks. We then decided upon the reported objectives and scope by selecting for audit those areas most at risk. We selected Board oversight, leave accruals, and information technology for further audit testing. Our audit included the following steps:

• We reviewed the School’s fi nancial internal control policies and procedures contained in its charter to determine the Board’s fi scal oversight responsibilities.

• We reviewed the Board minutes and fi nancial reports contained in the Board minutes for the period July 1, 2010 to December 31, 2011 to determine what reports and fi nancial information were provided to the Board.

• We reviewed the annual budget for fi scal years 2010-11 and 2011-12.

• We reviewed the School’s 2010 annual report to the New York State Education Department; specifi cally, the 2011-12 budget submitted with that report. We compared this budget to the Board-approved budget.

• We reviewed budget-to-actual reports for the periods July 1, 2010 to June 30, 2011 and July 1, 2011 to December 31, 2011.

• Using a random sample generator we selected the month of February 2011 and verifi ed that all cash receipts were properly deposited and recorded in that month.

• Using a random sample generator we selected two months (September 2010 and April 2011) and verifi ed all wire transfers were properly authorized, supported, and for valid school purposes in those two months.

• We interviewed the Director and the payroll clerk to gain an understanding of the payroll process and procedures.

• We reviewed the employee handbook, the collective bargaining agreement with the Riverhead Charter School Employees’ Association, and individual employee contracts to determine employee leave benefi ts.

Page 22: 2012 state audit of the Riverhead Charter School

2121DIVISION OF LOCAL GOVERNMENT AND SCHOOL ACCOUNTABILITY

• We selected all fi ve full-time, 12-month employees and two teachers (those with the highest sick leave balance and lowest sick leave balance, respectively, at the last payroll period in the audit period) to test the accuracy of the leave accruals.

• We reviewed payments to two employees who left School employment during the audit period and received payouts for unused vacation.

• We reviewed School policies related to computer use and information technology (IT).

• We interviewed the Director and the consultant in charge of IT to gain an understanding of the procedures and controls over IT.

• We tested user access and passwords to the fi nancial application for vulnerability.

• We traced the voided/deleted checks for the period July 1, 2010 to June 30, 2011 to the physical checks.

• We randomly selected September 2011 and reviewed the audit trail report looking for input activity outside normal business hours.

We conducted this performance audit in accordance with generally accepted government auditing standards (GAGAS). Those standards require that we plan and perform the audit to obtain suffi cient, appropriate evidence to provide a reasonable basis for our fi ndings and conclusions based on our audit objectives. We believe that the evidence obtained provides a reasonable basis for our fi ndings and conclusions based on our audit objectives.

Page 23: 2012 state audit of the Riverhead Charter School

22 OFFICE OF THE NEW YORK STATE COMPTROLLER22

APPENDIX C

HOW TO OBTAIN ADDITIONAL COPIES OF THE REPORT

To obtain copies of this report, write or visit our web page:

Offi ce of the State ComptrollerPublic Information Offi ce110 State Street, 15th FloorAlbany, New York 12236(518) 474-4015http://www.osc.state.ny.us/localgov/

Page 24: 2012 state audit of the Riverhead Charter School

2323DIVISION OF LOCAL GOVERNMENT AND SCHOOL ACCOUNTABILITY

BINGHAMTON REGIONAL OFFICEH. Todd Eames, Chief ExaminerOffi ce of the State ComptrollerState Offi ce Building - Suite 170244 Hawley StreetBinghamton, New York 13901-4417(607) 721-8306 Fax (607) 721-8313Email: [email protected]

Serving: Broome, Chenango, Cortland, Delaware,Otsego, Schoharie, Sullivan, Tioga, Tompkins Counties

BUFFALO REGIONAL OFFICERobert Meller, Chief ExaminerOffi ce of the State Comptroller295 Main Street, Suite 1032Buffalo, New York 14203-2510(716) 847-3647 Fax (716) 847-3643Email: [email protected]

Serving: Allegany, Cattaraugus, Chautauqua, Erie,Genesee, Niagara, Orleans, Wyoming Counties

GLENS FALLS REGIONAL OFFICEJeffrey P. Leonard, Chief ExaminerOffi ce of the State ComptrollerOne Broad Street PlazaGlens Falls, New York 12801-4396(518) 793-0057 Fax (518) 793-5797Email: [email protected]

Serving: Albany, Clinton, Essex, Franklin, Fulton, Hamilton, Montgomery, Rensselaer, Saratoga, Schenectady, Warren, Washington Counties

HAUPPAUGE REGIONAL OFFICEIra McCracken, Chief ExaminerOffi ce of the State ComptrollerNYS Offi ce Building, Room 3A10Veterans Memorial HighwayHauppauge, New York 11788-5533(631) 952-6534 Fax (631) 952-6530Email: [email protected]

Serving: Nassau and Suffolk Counties

NEWBURGH REGIONAL OFFICEChristopher Ellis, Chief ExaminerOffi ce of the State Comptroller33 Airport Center Drive, Suite 103New Windsor, New York 12553-4725(845) 567-0858 Fax (845) 567-0080Email: [email protected]

Serving: Columbia, Dutchess, Greene, Orange, Putnam, Rockland, Ulster, Westchester Counties

ROCHESTER REGIONAL OFFICEEdward V. Grant, Jr., Chief ExaminerOffi ce of the State ComptrollerThe Powers Building16 West Main Street – Suite 522Rochester, New York 14614-1608(585) 454-2460 Fax (585) 454-3545Email: [email protected]

Serving: Cayuga, Chemung, Livingston, Monroe,Ontario, Schuyler, Seneca, Steuben, Wayne, Yates Counties

SYRACUSE REGIONAL OFFICERebecca Wilcox, Chief ExaminerOffi ce of the State ComptrollerState Offi ce Building, Room 409333 E. Washington StreetSyracuse, New York 13202-1428(315) 428-4192 Fax (315) 426-2119Email: [email protected]

Serving: Herkimer, Jefferson, Lewis, Madison,Oneida, Onondaga, Oswego, St. Lawrence Counties

STATEWIDE AUDITSAnn C. Singer, Chief ExaminerState Offi ce Building - Suite 1702 44 Hawley Street Binghamton, New York 13901-4417(607) 721-8306 Fax (607) 721-8313

APPENDIX DOFFICE OF THE STATE COMPTROLLER

DIVISION OF LOCAL GOVERNMENT AND SCHOOL ACCOUNTABILITYAndrew A. SanFilippo, Executive Deputy Comptroller

Steven J. Hancox, Deputy ComptrollerNathaalie N. Carey, Assistant Comptroller