Finding |
New or Repeat |
Finding Summary |
Status |
Comment |
Finding 1
|
(Repeat)
|
“Existing procedures and controls were not adequate to ensure that
proper amounts were received and all collections were deposited for the
Before and After School Care Extended Learning Program.
|
Green
|
Finished 6 months early.
|
Finding 2
|
(Repeat)
|
“PGCPS did not maintain required documentation justifying the use of
sole source procurements or the benefits of using intergovernmental
cooperative purchasing agreements (ICPAs) as required by State Law, and did
not ensure that ICPA-related invoice pricing agree to the ICPA.”
|
Red
|
The implementation of remedial steps for this finding has been delayed, pending a significant revision of remedial steps intended to achieve a comprehensive solution to the problems identified in the audit.
|
Finding 3
|
|
“PGCPS did not always obtain Board of Education approval for contracts and did not always document its reasons for awarding competitively bid contracts to vendors that were not deemed the most qualified or the lowest cost bidders”
|
Blue, on track
|
|
Finding 4
|
(Repeat)
|
“PGCPS did not establish adequate internal controls over its automated human resource and payroll system, as user capabilities were not properly limited and supervisors were tasked with routinely approving an excessive number of time records.”
|
Blue, on track
|
The preliminary step has been accomplished; implementation step deadlines begin in 2020.
|
Finding 5
|
(Repeat) |
“Critical human resources and payroll transactions were not always subject to a documented independent supervisory review”
|
Green
|
This is a repeat finding which has now been addressed. This remedial work on this Finding was completed two months early.
|
Finding 6
|
(Repeat)
|
“Internal controls and record keeping related to Transportation Department bus driver and bus attendant payrolls were not adequate to ensure the propriety of salary payments.”
|
Green, completed on schedule
|
This was a repeat finding which has now been addressed.
|
Finding 7
|
|
“PGCPS lacked a policy requiring the justification or rationale for executive employee salary increases and such increases were not reported to the Board.”
|
Green, completed on schedule.
|
|
Finding 8
|
(Repeat)
|
“Physical Inventories of equipment were not conducted as required and access to the automated inventory records was not adequately restricted.”
|
Blue, on track
|
Remedial steps include performing an ⅓ of total property inventory each year beginning SY2020, therefore this Step will be completed by the last day of June, 2022
|
Finding 9 |
(Repeat) |
“PGCPS equipment inventory records were not comprehensive or complete.” |
Blue, on track. |
All remedial steps thus far completed on time or early. The remaining remedial steps are ongoing as they require quarterly and annual reviews/inventory. Complete remediation of this finding is scheduled to occur in June, 2022. |
Finding 10 |
(Repeat) |
“The ERP and student management system databases were not configured to log certain critical security activity, nor were the ERP’s account and password controls adequate. In addition, an insecure service was enabled for the student management system database.” |
Yellow, completed September 2019 |
This was a repeat finding which has now been addressed. |
Finding 11 |
(Repeat) |
“Thirty-five publicly accessible servers were improperly located within the internal network, intrusion detection prevention system coverage for untrusted traffic did not exist, and PGCPS network resources were not secured against improper access from contractors using remote access and high school students using school computer labs and media centers.” |
Red, completion expected October 2019 |
As with Finding 12 (below) the PGCPS remediation plan was the subject of an OLA Auditor follow up query requesting clarification of specific remedial actions, to which PGCPS promptly responded. To date, there has been no additional request for clarification. |
Finding 12 |
|
“PGCPS had not established procedures to ensure malware protection software was installed, current, and operational on all active computers and that computers running vulnerable installed software had security updates applied.” |
Blue, on track. |
As with Finding 11 (above), the PGCPS remediation plan was the subject of an OLA Auditor follow up query requesting clarification of specific remedial actions, to which PGCPS promptly responded. To date, there has been no additional request for clarification. The remedial plan requires an ongoing process of checking for obsolete machines for disposal and outdated software which must be updated. |
Finding 13 |
(Repeat) |
“PGCPS did not ensure that employee access to its automated financial systems was appropriate.” |
Red |
The last step for this Finding is scheduled to be completed in mid-October, 2019 |
Finding 14 |
|
“PGCPS did not follow best practices for selecting pre-approved vendors for task orders and the selection process was not consistent between the construction and mechanical JOC contracts.” |
Yellow, completed September 2019 |
|
Finding 15 |
|
“PGCPS did not adequately review price quotes submitted by JOC vendors selected for task order. Consequently, approved task orders contained questionable or unsupported costs.” |
Yellow, completed September 2019 |
An enhanced process for line-by-line review of JOC contracts was established in a timely manner but the Standard Operating Procedures and accompanying document required additional refinement which took extra time to complete. |
Finding 16 |
(Repeat) |
“PGCPS did not verify that guaranteed savings were achieved related to work performed under two energy performance contracts.” |
Blue |
The remedial step depends on whether PGCPS enters an ESCO contract at which time contract-specific standards will be established before contract ratification and baselines will be established within 6 months of ratification. |
Finding 17 |
(Repeat) |
“The performance of preventive maintenance was not consistently documented and tracked for monitoring purposes.” |
Blue, on track. |
The preliminary work has been accomplished. The next remedial step will be ongoing beginning December of 2019. |
Finding 18 |
(Repeat) |
“PGCPS did not establish adequate accountability over access to the automated fuel dispensing system.” |
Red |
Awaiting vendor's proposal |
Finding 19 |
(Repeat) |
“PGCPS did not implement certain practices to promote more efficient use of its bus fleet.” |
Yellow, completed August 2019 |
This is a repeat Finding which has now been addressed |