"2009 Internal Audit Plan"
Central Arizona Project (CAP) Internal Audit Department 2009 Internal Audit Plan Agenda Number 4. Attachment Timing Project Description Q1 Purchasing Credit Card Assess compliance with CAWCD’s Purchasing and Fleet Credit Card Program Program Q1 Purchasing Benchmark CAWCD’s authority levels for evaluating and awarding contracts against other governmental entities. Review the appropriateness of the Purchasing Policy’s exceptions to competitive bidding. Q1 Employment Evaluate the efficiency of CAWCD's processing of job applications. Application Processing Identify opportunities for applications to be processed more efficiently to provide improved responsiveness to applicants. Q1 Industrial Hygiene Validate that CAWCD’s industrial hygiene programs are in compliance Programs and Processes with federal Occupational Safety & Health Administration (OSHA) regulations. Verify that actual practices comply with CAWCD’s Safety & Health rules, programs, and procedures. Q2 Maintenance Facilitate a maintenance self-assessment project utilizing maintenance Self-Assessment excellence best practices. Assist in the revision of the master plan to address any gaps found in the self-assessment. Page 1 of 2 Central Arizona Project (CAP) Internal Audit Department 2009 Internal Audit Plan Agenda Number 4. Attachment Timing Project Description Q2 Information Technology Evaluate computer and network security by simulating an attack Penetration Test (penetration test) on CAWCD's administrative, supervisory control and data acquisition (SCADA) and wide area network systems. Q3 Payroll Evaluate and verify compliance with CAWCD’s overtime and paid-leave policies. Determine if practices are in accordance with the federal wage- hour laws established by the Fair Labor Standards Act. Q3 Outage Readiness Facilitate the development of contingency plans for outage events that have the potential for impacting water deliveries. Q4 Asset Modifications Evaluate CAWCD’s compliance with established asset modification processes. Determine if CAWCD’s practices ensure that all changes that affect the form, fit, or function of assets are properly authorized and documented prior to implementation. Page 2 of 2