►
From YouTube: December 6, 2021 Audit Committee
Description
Additional information at
https://lims.minneapolismn.gov
A
A
As
we
begin,
I
will
note
for
the
record
that
this
meeting
has
remote
participation
by
members
of
the
audit
committee
and
city
staff
as
authorized
under
minnesota
statutes,
section
13.021
due
to
the
declared
local
public
health
emergency.
The
city
is
recording
and
posting
this
meeting
to
the
city's
website
and
youtube
channel
as
a
means
of
increasing
public
access
and
transparency.
A
B
A
Thank
you.
Let
the
record
reflect.
We
have
a
quorum
colleagues,
our
agenda
is
before
us.
May
I
have
a
motion
to
adopt
the
agenda
so
moved
so
moved
by
jay
singleton.
Is
there
a
message?
Actually?
Oh
I'm
sorry,
commissioner,
music,
all
right
seconded
by
jay,
singleton,
second
hooray
I'll.
Ask
the
clerk
to
call
the
role
on
commissioner
musage's
motion
to
adopt
the
agenda
committee.
A
A
Tie
yeah
I'll
say
mr
fisher's
seconds.
I
think
I'll
ask
the
clerk
to
call
the
roll
on
the
motion
to
accept
the
minutes
committee.
D
A
That
carries
in
the
minutes
are
accepted.
We
have
a
regular
size
agenda
today,
but
we
have
a
lot
of
people
here
to
go
into
some
of
these
reports.
Our
first
item
of
new
business
item
three
is
receiving
the
personal
and
work
issued
mobile
devices
policies
and
controls
audit
report.
There
are
several
people
here
for
the
presentation.
I
will
invite
director
patrick
to
go
ahead
and
take
it
from
here
and
to
introduce
the
others.
E
Thank
you,
chair,
palmisano
and
good
morning,
audit
committee
members.
I
believe
we
have
our
slide
deck
pulled
up,
yeah
thanks.
So
before
we
get
started
with
this,
we
know
oftentimes
we're
looking
in
an
audit
project
at
a
process
that
a
department
has
and
looking
at
it
through
the
audit
lens.
This
is
a
truly
enterprise
project,
we're
talking
about
mobile
devices
across
the
entire
city
and
you'll,
hear
more
in
the
methodology,
but
just
to
say
this
was
a
very
complex
and
wide
in
scope
project
and
I'd
really
like
to
thank
my
team,
travis
comlin.
E
You
get
for
all
their
hard
work
on
this.
It's
been
labor,
but
at
the
same
time,
because
it
has
such
a
broad
enterprise
impact.
I
think
it's
really
important
and
I
think
you'll
see
the
value
that
this
report
adds
to
the
city.
I'd
also
like
to
recognize
some
of
the
partners
we
worked
with
on
this
project,
who
were
incredible
and
their
responses
their
flexibility
in
working
with
us,
even
though
we
all
are
facing
challenges
right
now.
Our
team
from
I.t
led
by
paul
cameron,.
E
And
I'm
sorry,
I
can't
see
the
entirety
of
the
speaker
list.
We
also
have
from
the
clerk's
office
christian
rummelhoff
participated
and
kristin
olsen
is
here
on
behalf
of
the
clerk's
office,
and
then
we
also
work
with
rodney
olsen
in
the
radio
shop
and
others
in
the
convention
center
and
across
the
city.
So
again
massive
enterprise
project,
and
thank
you
everybody
for
your
participation.
E
I
I
think
this
will
genuinely
add
value
to
our
operations.
So
with
all
that
said,
let's
move
into
the
slides.
E
So
again,
how
did
we
wind
up
here
in
the
enterprise
mobile
device
audit
for
the
purposes
of
this
audit?
What
we're
talking
about
is
tablets
and
cell
phones.
Why
are
we
doing
this
audit
right
now?
Well,
it's
always
been
a
critical
need
and
you'll
see
as
we
go
through
the
slides.
This
was
timely,
but
also
overdue,
to
look
at
these
practices,
but
as
part
of
our
covet
assessment.
One
of
the
things
we
recognized
was
the
importance
of
strong
governance
and
oversight
of
mobile
devices
as
people
shift
to
a
remote
work
environment.
E
It's
easier
when
you're
in
the
office
to
walk
down
the
hall
or
to
make
a
call
using
your
desk
phone
and
keep
things
kind
of
in
the
government
sphere
and
when
it
comes
to
mobile
devices
as
they
gain
more
and
more
capabilities,
and
we
use
them
more
and
more
for
work
in
the
remote
environment.
It
was
absolutely
timely
to
kind
of
tighten
up
this
process
and
look
at
what
we
could
be
doing
better
so
again,
clear
debt
expectations
and
processes
in
place
ensure
that
we're
using
these
resources
effectively
and
efficiently.
E
So
our
objective
was
sweeping
and
it
was
to
review
the
city's
policies
and
controls
related
to
the
use
of
personal
and
work
issued
mobile
devices.
To
talk
about
some
more
of
the
background
and
the
work
I'm
going
to
turn
it
over
turn
it
over
to
travis
com.
My
one
of
my
internal
auditors
in
the
shop
who's
gonna,
discuss
the
scope
and
and
other
introductory
elements.
D
Okay,
good
morning,
chair
palmison,
a
member
of
the
audit
committee.
So
for
the
scope
of
this
we
did
from
january
1st
2019
through
august
31st
2021
to
kind
of
encapsulate
kind
of
before
they
work
from
home
period
and
also
their
good
working
environments.
D
And,
as
we
noted
in
our
sorry
about
that,
I
think
there
you
go
so
they
noted
kind
of
in
our
previous
updates.
The
scope
had
kind
of
four
main
parts
to
review
department
and
citywide
policies
in
place,
rated
the
use
of
mobile
devices.
D
We
assess
the
processes
for
the
approval
and
handling
of
mobile
devices,
including
billings
and
reimbursements,
from
the
application
issuance
to
disposal
across
the
city,
we
attempted
to
verify
the
number
of
department-issued
mobile
devices
across
the
city,
including
inactive
devices,
and
a
availability
of
complete
and
current
data
rate
to
the
use
and
cost.
Then
also
we
assess
controls
and
govern
processes
in
place
related
to
data
security
and
the
use
of
government
data.
E
Thanks
travis
during
the
project
we
worked
with
four
main
departments:
it
and
radio
shop
were
certainly
very
important
throughout
it
and
when
we
began
this
project,
radio
shop
dealt
with
a
sizable
portion
of
mobile
devices
at
the
city,
part
of
finance
and
property
services.
E
You
could
really
go
to
two
sources
to
get
mobile
devices
and
we'll
we'll
talk
more
about
that.
In
the
presentation
beginning
in
october,
most
of
the
radio
shops
duties
for
mobile
devices
were
transferred
over
to
it,
so
it
became
our
main
partner
as
we
completed
the
project,
mpd
handle
or
minneapolis
police
department
has
their
own
cell
phone
distribution
program.
Their
phones
are
tied
to
body
cameras
and
have
other
elements,
but
they
they
handle
their
own
distribution
as
well
as
the
convention
center.
E
So
the
city
also
utilizes
two
government-wide
mobile
device
contracts.
These
are
generally
administered
through
the
federal
government
and
allow
for
some
discounts
and
and
other
stuff
on
mobile
devices.
So
we
we
are
attached
to
those
contracts.
E
E
You
can
see
that
the
generally
what
our
phone
and
data
costs
were
for
radio
shop
and
it
convention
center
police
coming
out
to
about
between
80
and
100
000
per
period,
with
a
total
cost
of
around
550
000
for
the
period
of
time
covered
in
this
this
chart.
So
just
for
some
macro
level
data.
E
E
E
And
finally,
there
was
no
enterprise-wide
mobile
device
management
solution
in
place
that
covered
all
mobile
devices
issued
by
the
city
and
that
led
to
varying
security
coverage
in
place.
E
We'll
move
on
to
discussing
these
in
detail,
first
up
being
the
policies
and
procedures,
so
city-wide
cell
phone
policy
did
not
reflect
current
practices
or
capabilities
of
cell
phones.
So
when
we
looked
at
the
city-wide
policy,
it
was
drafted
nearly
20
years
ago
and
obviously
we
all
know.
E
In
the
intervening
time,
cell
phones
have
gotten
significantly
more
complex,
they're,
essentially
more
powerful
than
a
lot
of
the
computers
of
the
era
when
the
cell
phone
policy
was
drafted
so
having
a
policy
that,
at
one
time
had
kind
of
general
requirements
for
mobile
devices,
didn't
reflect
our
current
use
of
how
we
work
on
mobile
devices
at
the
city
and
therefore
handling
procedures
and
expectations.
E
E
It
has
issued
management
action
plans.
It
now
covers
the
bulk
of
cell
phones
across
the
city.
Aside
from
the
two
that
I
noted,
they're
they're
responsible
for
the
vast
majority
of
cell
phones
issued
across
the
city
and
therefore
have
some
ownership
in
the
process
thanks
again
to
it
for
issuing
such
strong
management
action
plans
with
concrete
steps
to
take
and
first
in
regards
to
item
one
I.t
generally,
and
you
can
read
for
more
detail
in
the
report.
E
E
It's
going
to
cover
best
practices
and
rules
for
the
life
cycle,
use
and
management
of
mobile
devices
and
data
they're,
implementing
an
inventory
management
system
which
I'll
discuss
more
in
a
later
audit
finding,
and
the
other
issue
is
starting.
A
discussion
with
city
leadership.
To
explore
centralization.
E
Consolidation
under
I.t
would
mean
that
they
would
manage
all
devices.
There
would
be
no
distinction
for
any
individual
department.
Obviously,
if
it's
a
central
source
with
it
being
the
source,
they
have
greater
control
over
how
phones
are
issued
disposed
of
and
things
of
that
nature.
So
those
conversations
will
begin.
It's
a
more
complex
component,
but
this
is
a
strong
set
of
actions
taken
to
to
resolve
this
issue
with
a
target
date
of
december
1
2022
for
all
items.
E
Second,
is
mobile
device
inventory
management.
We
tried
to
create
a
essentially
a
list
of
all
devices
tied
to
people
to
reconcile
those
with
the
contracts
that
we
have
across
the
city.
As
each
department
maintains
devices,
we
were
looking
for
departments
to
provide
adequate
inventories,
so
how
many
devices
do
you
have?
What
are
those
devices
and
who
who
owns
them,
and
what
we
found
throughout
the
process
was
that
departments
were
relying
on
the
service
providers,
databases
for
their
inventory.
E
So
that
means
that
if
the
service
provider
was
verizon,
if
they
wanted
to
know
their
inventory
to
share
with
us,
they
would
pull
the
data
from
the
verizon
contract
and
billing,
and
that
would
give
them
their
essentially
the
data
of
what
devices
they
had.
However,
through,
if
you
want
to
reconcile
your
bill,
you
wouldn't
rely
on
the
biller
to
provide
the
data
on
what
you're
being
billed
for.
It
would
be
a
much
better
process
to
have
your
own
inventory.
E
That
way,
you
can
check
it
against
the
bill
and
and
do
an
accurate
reconciliation
that
way
we're
not
being
overbuilt,
and
we
we
know
where
devices
are
and
who
they're
attached
to
so
departments,
relying
on
that
and
not
maintaining
their
own
independent
inventory
created
a
problem
for
us
in
trying
to
reconcile
that
data
with
billing
data,
because
we
only
had
a
single
source
of
truth
and
that
came
from
the
provider,
mobile
devices
and
note,
like
cell
phones
and
tablets,
don't
have
asset
tags,
they're
not
assigned
them,
they
do
have
identifying
physical
features.
There
are.
E
There
are
features
on
a
phone
both
on
either
the
sim
card
or
the
device
itself
that
are
identifying
so
there's
there's
ways
beyond
asset
tags
to
track
phones,
but
you
know
the
city
laptop
does
have
an
asset
tag
and
other
things.
My
mobile
devices
didn't
also
complicates
the
ability
of
the
ways
audit
might
track
and
create
an
independent
database
of
city-issued
mobile
devices.
E
E
So
in
the
future
that
that
system
will
create
a
category
or
a
accurate
list
of
city-issued
mobile
devices
and
that's
what
it's
going
to
primarily
target
devices
that
access
the
city,
data
or
the
city
network,
so
that
implementation
is
ongoing
and
with
a
target
remediation
date
in
the
end
of
september
of
2022.
E
The
third
issue
is
mobile
device.
Disposals
I'll
cover
this
mobile
device
is
particularly
departments
have
their
own
processes
again,
there's
not
that
enterprise
level
policy,
so
departments
have
come
up
with
their
own
process
and
expectations
when
it
comes
to
returning
mobile
devices
when
either
it's
due
for
an
upgrade
or
is
part
of
an
employee
separation,
so
departments
have
been
free
to
to
choose
how
they
go
about
that
process
and
with
that
level
of
loose
controls
related
to
it,
departments
are
not
always
returning
devices
they're,
not
generally
reused.
E
Sometimes
it
occurs.
Sometimes
it
does
not,
but
we
all
know,
as
we
know,
a
lot
of
some
of
the
devices
have
value
depending
on
their
age
and
without
consistency,
there's
no
way
to
ensure
that
we're
maintaining
we're
controlling
our
own
government
assets
in
an
appropriate
way
that
doesn't
lend
itself
to
abuse
or
waste.
E
To
the
next
slide,
it's
developed
an
action
plan
related
to
this.
The
governing
policy
for
mobile
devices
will
address
the
final
disposition
of
devices
and
again,
the
min
inventory
system
identified
in
issue.
Two
is
gonna,
assist
I.t
in
establishing
that
process
through
disposal,
knowing
that
an
employee
separates
from
the
city.
If
we
have
a
more
general
list
of
users
with
devices
if
an
employee
is
separating
from
the
city,
we
have
that
that
independent
list
you
can
see
if
that
user
was
assigned
a
phone
and
then
go
through
the
the
separation
process.
E
Knowing
that
employee
has
a
device
and
figuring
out
how
to
dispose
of
it,
there
are
multiple
ways
to
dispose
of
the
phone:
it's
not
always
destroying
it
or
recycling
it
for
for
another
employee
and
it's
addressing
a
robust
response
on
how
we're
going
to
move
through
a
phone's
end
of
life
cycle
or
reuse.
So
that
is
a
target
remediation
date
of
december
1st
2022.
D
Thank
you,
ryan.
So
now
for
data
governance,
we
noted
that
there
there's
not
specific
governance,
language
and
practices
regarding
data
that
may
be
created
or
maintained
on
mobile
devices
in
policies
and
practices
across
the
city.
So
really
we
noted
that
there
there's
not
really
specific
coverage
or
clear
guidelines
to
employees
on
regarding
how
to
use
mo
or
data
on
the
devices
there's
a
lot
of
enterprise-wide
information
policies
and
they
may
cover
mobile
devices
implicitly
if
they
are
platform
agnostic,
for
example,
looking
at
the
records,
management
or
privacy
policy
or
privacy
principles.
D
But
there
are
considerations
in
government
data
and
the
mobile
devices
in
general
are
not
clear
beyond
some
of
those
you
know
areas
and,
as
a
result,
there's
really
not
documented
controls
and
processes
in
place
that
can
be
used
and
kind
of
used
by
employees
management
to
ensure
that
data
is
being
are,
you
know,
properly
accessed
and
using
on
devices,
and
then
we
also
know
that
there's
opportunities
for
data
requests
workflow
to
more
specifically
incorporate
and
include
mobile
devices
in
all
aspects
of
the
process.
D
It's
time
consuming
and
efficient,
with
a
device
you're
trying
to
be
physically
presented
and
examined
to
kind
of
extract
that
data
from
the
device
and
with
an
enough
for
management
action
plans,
management
work
in
the
city
clerk's
office
citrix
office
are
an
active
mobile
device
policy
association
controls
unique
to
mobile
devices
and
providing
guidance
on
the
implementation
of
existing
controls
and
on
mobile
devices,
including
key
controls
such
as
requiring
this
city
business
to
be
conducted
on
city
managed
devices.
D
Other
information
policies
are
updated,
making
sure
that
they
were
everything
kind
of
aligns
under
one
mobile
device
policy
that
is
covers
and
out
of
covers
all
aspects
of
mobile
devices
and
government
data,
and
the
next
slide
for
in
regards
to
the
data
request.
Policy
management
has
already
required
software
to
facilitate,
searching
and
collecting
text
message
data
and
then
we'll
revise
the
data
practices
workflows
to
reflect
new
mobile
device
controls
and
collection
capabilities,
with
data
request
guidance
with
the
target
remediation
date
of
july
in
july,
2022.
D
And
then
the
next
last
final
issue
is
mobile
device
management.
So
we
noted
that
there's
an
enterprise-wide
mobile
device
management
solution
in
place
that
covers
all
mobile
devices
issued
by
the
city
and
there's
varying
security
coverage
in
place.
So
we
noticed
that
there
are
some
kind
of
security
coverage
in
place
of
some
capabilities,
such
as
maybe
airwash
issued
by
I.t,
or
maybe
a
watch
for
ipads
issued
by
at
or
on
mpt
or
on
cell
phones
by
the
police
department.
D
For
example,
it
ensures
that
there
is
some
sort
of
mobile
device
management
system
that
can
help
the
theta
that
can
help
with
separation
of
work
and
personal
data
that
can
help
with
tracking
that
can
help
with
some
of
those
capabilities
for
devices
for
such
as
maybe
remote
wiping
if
the
device
device
goes
missing
along
with
those
and
if
you
go
to
the
next
slide,
so
management
action
plan.
So
I
t
department
has
started
a
pilot
for
a
mobile
device
management
system
program
earlier
this
year.
D
Working
with
the
convention
center
and
also
requested
funding
for
fte
through
the
budget
process.
D
Continue
this
initiative,
noting
that
it
is
going
to
require
some
support
and
resources
to
ensure
that
just
to
cover
the
cost
for
the
of
this
device
or
of
this
system,
and
also
the
implementation,
and
also
the
monitoring,
and
make
sure
that
the
system
is
used
as
intended
and
then
there'll
be
additional
need
for
ongoing
support
from
retaining
it
in
the
future
years
and
then
also
as
part
of
this
management,
also
noted
that
personal
devices
will
not
be
allowed
to
directly
access
the
internal
city
network.
D
E
Thank
you
travis.
I
think
the
important
thing
to
note
on
this
is
that
what
we've
done
is
cover
a
well-rounded
package
and
gotten
management
responses
for
the
issuance
of
phones
all
the
way
through
their
use,
the
data
that
exists
on
them
the
way
employees
use
them
and
the
way
they're
returned
and
bills
are
reconciled.
E
I
know
our
nose
has
been
pretty
close
to
this
work,
so
sometimes
it's
good
to
take
a
step
back
and
think
about
the
bigger
picture
and
and
where
we're
at,
but
we
are
looking
at
additional
audit
issues
or
audit
issues
and
management
responses
that
really
do
provide
holistic
coverage
for
the
entirety
of
a
mobile
device's
use.
We
know
that
this
is
only
going
to
be
more
important
as
time
goes
on
and
we
work
in
the
remote
environment.
E
I
think
it's
timely
that
this
this
audit
is
complete
and
that
we've
had
such
great
cooperation
from
our
partners
in
I.t
and
the
clerk's
office
to
address
those
policies
happy
to
answer
any
questions
that
may
have
come
up
and
if
I
can't
then
perhaps
direct
them
to
the
appropriate
staff.
A
C
I
I
think
I
think
you
indicated
this
in
your
remarks
director
patrick,
but
I
just
want
clarification
as
I
understand
it.
City
employees
currently
have
a
mix
of
using
both
city-issued
phones
and
having
their
own
personal
phones.
E
E
Personal
devices
can't
connect
to
the
city
internal
network,
so
they
don't
have
access
to
the
internal
network,
so
a
work
issued
device
could
have
access
to
the
internal
city
network
and
if
it's
covered
by
mdm,
a
mobile
device
solution
that
would
allow
security
controls
to
be
placed
on
it
that
that's
more
enhanced,
not
capable
to
add
those
same
solutions
to
a
personal
issue
device
and
therefore
not
allowing
it.
Access
to
the
internal
network
makes
sense.
C
Okay,
if
I
may
follow
up
tara
palmisano
does,
is
it
possible
if
there's
city
data
or
residing
or
residing
on
personal
cell
phones,
currently.
E
That
is
possible.
That
is
why
we
need
a
policy
in
place
that
covers
the
use.
The
clerk's
office's
policy
will
cover
how
data
is
created
and
maintained
related
to
mobile
devices.
There
are
general
policies
that
cover
how
government
data
exists,
but
having
stuff
specific
to
mobile
devices
will
will
at
least
put
better
controls
in
place
from
the
policy
front,
so
the
in
their
policy
they
will
address
data
created
via
mobile
devices,.
C
F
Thank
you,
chef,
homisano,
and
thanks
for
looking
at
this
director,
patrick,
I
I
I
guess.
G
I'm
curious,
if
there's
any
policy
recommendations
that
come
out
of
this
look
or
if
it
feels
like
within
the
within
the
scope
of
existing
processes.
Some
of
the
tightening
down
that's
happening
if
this
is
something
that
gets
resolved
through
more
procedural
means
or
if
there's
something
that
the
next
council
should
consider
in
sort
of
thinking
about
device
management
and
thinking
about
either
extensions
of
the
data,
privacy,
work
or
or
you
know,
continued
consideration
of
data
management
policies
in
the
city.
E
But
that's
going
to
be
the
responsibility
of
policymakers
to
to
be
thoughtful
in
implementing
this,
without,
while
respecting
the
need
for
controls
of
significantly
tighter
controls
in
place
and
not
missing
out
on
the
opportunity
to
use
mobile
devices
as
the
powerful
tool
that
they
are,
we
just
don't
want
to
use
them
in
a
way
that
that
violates
the
data
practices
act
or
exposes
us
to
massive
security
issues
so
yeah.
I
would
say
that
this
is
going
to
be
an
ongoing
priority
over
the
next
year.
C
You
mentioned
that
I
t
is
required,
has
put
a
request
for
an
additional
fte
in
the
budget.
Request
is,
are,
is
the
it
department
confident
that
they
have
the
staff
and
resources
in
order
to
accomplish
the
management
plans
that
you've
mentioned
in
the
report?.
E
Chair
palmisano
committee
member
fisher,
I
think
that
question
might
be
better
answered
by
our
I.t
director
and
that
would
be
paul
if
he's
available.
H
Chair
palmisano
count
committee
member
fisher,
a
couple
pieces
to
that
from
a
budgetary
standpoint,
so
from
the
mobile
device
management
we
have
in
the
2022
budget
one-time
money
to
help
with
the
implementation
of
that.
What
we
will
be
requesting
and
what
we
originally
had
requested
was
to
have
a
full-time
staff
person
to
assist
with
that.
And
so
this
kind
of
carries
us
through
the
first
year,
and
we
will
continue
that
request
to
make
sure
that
we
can
maintain
that
program
going
forward.
H
H
H
We've
implemented
it's
where
most
of
the
workflows
are
implemented
for
it,
including
things
like
separation,
onboarding,
the
procurement
of
cell
phones
are
handled
through
that
platform,
and
so
this
is
sort
of
a
natural
evolution
of
where
that
that
product
and
how
our
use
of
it
will
go.
And
so,
from
that
perspective,
I'm
comfortable
that
we
that
the
the
lift
to
kind
of
deal
with
the
management
of
that
are
things
that
we
have
covered
within
the
department.
A
I
have
a
question:
does
this?
Did
this
also
imagining
not
include
our
park
board
mobile
devices
as
used
by
the
park
board
or
just
the
city
part
of
the
enterprise.
E
Chair
palmisano,
this
covered
the
city
part
of
the
enterprise,
I
being
that
it
was
kind
of
the
central
solution
for
a
lot
of
these
issues
and
focusing
on
tackling
the
most
amount
of
devices
we
could
in
the
in
a
shorter
period
of
time.
That's
where
we
place
their
efforts,
but
the
policy
that's
crafted
should
be.
A
Great
seeing
no
further
questions
or
comments
from
I,
there
is
one
commissioner
music.
Thank
you.
I
Sir
palmisano,
so
will
a
copy
of
the
report
be
communicated
to
the
audit
committee
contact
at
the
park
board
so
that
they
can
communicate
that
out
to
the
it
division
for
implementation
of
the
best
practices
they're
in.
A
A
Thank
you
that
carries
in
that
motion
is
approved.
Next,
we
have
item
four,
the
biennial
body,
worn
camera
and
automated
license
plate
reader
audit
colleagues
just
to
distinguish
between
these.
This
is
the
one
that's
required
by
the
state,
and
I
will
turn
it
over
to
director
patrick
and
team
to
give
us
this
audit
report.
Mr
patrick.
E
E
One
more
thanks.
So
every
two
years
we
are
required
under
two
different
minnesota
statutes
to
audit
both
body-worn
cameras
and
automated
license
plate
readers,
the
statutes
themselves.
If
you
look
at
them,
they
establish
the
audit
testing
requirements.
So
it's
in
in
the
report,
you'll
see
those
requirements
and
it's
pretty
cleanly
laid
out.
What
are
the
the
things
that
are?
E
We
are
required
to
do
under
state
law
to
show
that
we're
complying
with
those
statutes
as
we
use
as
we
use
body
cameras
and
automated
license
plate
readers
in
some
years
past
we've
gone
kind
of
beyond
the
testing
scope
of
what
the
state
law
requires,
but
given
the
current
department
of
justice
and
minnesota
department
of
human
rights
investigations,
we
we
stuck
pretty
closely
to
the
the
general
audit
requirements
under
state
statutes,
and
so
therefore
the
objective
was
to
perform
those
tests
and
to
note
any
findings
and
if
we
were
in
compliance
transmit
that
report
to
the
state
to
show
our
compliance
over
the
next
slide.
E
One
more
so
we
are
in
compliance
in
all
the
categories
for
portable
recording
systems
and
automated
license
plate
readers.
There
were
some
some
feedback
provided
from
the
vendor,
but
the
the
broadest
takeaway
here
is
that
per
our
two-year
required
audits.
We
are
complying
with
minnesota
state
statutes,
so
there
were
two
identified
issues:
one
in
the
portable
recording
systems
or
body
worn
cameras,
a
deletion
of
data
in
axon.
So
that's
this.
That's
the
online
and
and
system
that
we
use
to
store
body,
worn
camera
videos.
E
E
There
was
a
note
that,
in
some
of
the
interviews
that
automated
license
plate
readers
times
were
not
always
accurate,
this
wasn't
a
finding,
that's
that
doesn't
make
it
non-compliant
per
se
with
the
the
state
requirements.
However,
this
is
what
it
required
was
just
an
update
to
fix
the
issue,
so
police
department
can
work
on
that.
I'm
just
getting
the
software
updated
to
make
sure
all
the
times
were
accurate.
E
In
portable
recording
systems,
again
I
mentioned
policy
language
was
added
deletion
of
local
data
and
future
storage
of
local
data
is
now
covered
under
policy.
So
not
not
a
lot
to
discuss
related
to
these
reports.
It's
good
to
know
that
we're
in
compliance
for
those
two
items
and
the
full
reports
describe
kind
of
the
audit
elements
themselves,
but
yeah,
basically
we're
in
compliance
and
that's
good
news.
A
Director,
patrick,
what
it,
what
was
the
general
margin
of
error
on
the
license
plate
readers
being
off?
Are
we
talking
about
a
matter
of
of
minutes?
Are
we
talking
about
a
matter
of
days.
E
Chair
palmisano,
it
was
not
a
wide
margin
of
error,
it
varied,
and
this
was
something
that
was
reported
in
an
interview
but
not
found
by
the
testers,
so
it
wasn't
applying
to
all
recordings.
So
it
was
noted
in
an
interview.
E
A
Mr
fisher
seconds,
the
motion
will
the
clerk.
Please
call
the
roll.
F
A
Are
six
eyes
that
carries
and
that
motion
is
approved?
Item
number
five
is
our
next
item
of
business
and
that's
our
regular
update
of
internal
audit
department's
work
in
progress,
and
I
think
a
number
of
members
of
the
audit
department
will
probably
present
that
in
part,
so
director
patrick
go
ahead.
E
Yes,
thank
you
and
one.
I
I
forgot
to
mention
one
last
thing
related
to
by
annual
audit
requirements.
Next
up
is
park
board
they're
staggered
years,
so
in
2022,
we'll
be
doing
the
same
type
of
routine.
State
law
required
audit
for
the
park
board
police
department
and
their
use
of
the
same
devices,
so
that
will
be
coming
up
in
the
following
year.
A
E
Yep
they're
staggered
so
every
other
year,
so
you're
getting
one
every
year,
we'll
move
into
the
auditor
update.
No,
so
first
provide
a
brief
introduction.
We'll
talk
about
our
completed
and
in
progress
work
for
this
meeting.
I'd
note
that
there
aren't
any
prior
audit
issue
follow-ups
or
continuous
monitoring
updates.
We
had
a
larger
one
last
last
time
and
we're
pretty
good
on
audit
issues,
we'll
be
adding
new
audit
issues
for
the
mobile
device
policy
to
our
audit
issue
tracker
and
likely
have
more
updates
in
february.
E
Move
to
the
next
slide.
Next,
we'll
talk
about
our
completed
and
in
progress
audit
work.
This
is
going
to
have
a
bit
of
a
larger
presentation
for
one
of
the
items.
I
think
it's
the
first
one
up
and
I'm
going
to
turn
that
over
to
you
get
us
a
lot.
Who's
been
the
lead
project
worker
lead
auditor
on
this
project.
If
you
recall
back
our
covid
phase,
3
projects
had
a
variety
of
different
elements.
J
Thank
you
ryan.
Madam
chair
committee,
members.
Good
morning,
like
ryan
mentioned,
I
would
like
to
provide
an
update
on
our
completed
work
for
the
health
department.
Kobe
19
project
that
we're
helping
them
with
first
tony
is
here
from
the
health
department.
I
would
like
to
thank
them
for
trusting
the
audit
department
to
help
with
this
project
and
in
terms
of
background,
this
was
a
partnership
between
internal
audit
and
the
health
department.
J
This
will
help
the
health
department
build
their
after-action
report,
which
will,
I
think,
come
up
use
at
some
point
next
year,
but
we
did
the
first
phase
for
them,
gathering
the
information
and
also
and
gave
them
feedback
in
terms
of
what
we
got
from
from
people.
Their
after-action
report
will
identify
like
what
went
well
in
their
response
areas
of
for
improvement
and
also
give
them
a
structure
for
implementing
an
improvement
plan.
Next
slide,
please
all
right.
J
Since
they're
going
to
be
the
one
putting
the
report
together,
they
wanted
an
independent
party
to
kind
of
gather
information
and
also
give
people
more
flexibility
to
really
give
their
thoughts
on
the
process
and
what
what
happens?
So
that's
the
role
that
eternal
audit
played
next
slide.
Please
all
right!
So,
like
I
mentioned
earlier,
we
conducted
a
survey
and
then
we
identified
some
themes
as
a
result
of
the
surveys
and
interviews
based
on
the
the
the
data
we
gathered
next
slide.
Please
all
right.
J
There
were
a
total
of
209
employees
across
the
city
that
received
the
survey.
So
we,
those
are
people
who
participated
in
the
pandemic
response
from
all
city
departments
in
2020
and
2021,
and
the
questions
in
the
survey
were
categorized
in
as
follows.
General
questions,
some
question
related
to
wellness
communication
relationship
with
supervisors
and
branch,
specific
questions
next
slide:
a
total
of
103
people.
J
So
that's
about
49
responded
to
the
survey
and
out
of
those
people,
there
was
a
question
asking
if
they
wanted
to
be
contacted
to
provide
additional
feedback
and
13
people
opted
to
provide
additional
feedback.
So
we
had
meetings
with
them
via
teams
and
gathered
their
feedback
and
included
them
in
our
responses.
J
So
then
we
compiled
everything
and
the
report
will
be
shared
with
the
health
department
actually
this
week
to
be
incorporated
in
the
after-action
report
at
some
point
next
year,.
J
I
think
that
covers
it
and
I
don't
know
tony's
here,
I'm
not
sure
if
she
wanted
to
say
something
or
otherwise
I'm
going
to
turn
it
back
over
to
ryan.
A
Are
there
any
comments
or
questions
from
my
colleagues
for
tony
or
ms
esolat.
D
E
We'll
continue
to
move
through
our
auditor
update
and
talk
about
the
other
projects
in
place.
So
first
is
the
communications
financial
audit.
If
you
recall
from
the
last
meeting
we're
assessing
how,
at
the
enterprise
level
how
the
city
tracks
spending
for
communications
activities,
that'll
allow
us
to
develop
an
accurate
enterprise
spend
we
don't
currently
have
one.
We
know
we
have
a
communications
department.
E
We
know
that
there
are
a
lot
of
efforts
around
the
city
to
do
communications
related
activities
and
therefore,
what
is
the
general
spend
for
communications
activities
of
the
city
and
what
are
the
controls
and
practices
in
place
to
to
make
that
an
efficient
process?
That's
not
currently
known
in
that
audit,
we'll
provide
answers
related
to
that.
So
we
are
in
field
work
currently
and
we
are
anticipating
the
completion
of
the
draft
report
by
mid-december.
E
We
are
working
with
the
office
of
police
contract
review
on
their
body-worn
camera
audit
progress
process.
So
this
is
a
special
project.
It
was
designed
to
work
over
the
year-long
period
to
help
them
as
they
create
it,
basically
we're
serving
as
subject
matter
experts
in
the
audit
process
as
they
need
them.
So
it's
the
responsibility
of
the
office
of
police
conduct
review
to
develop
this
process,
but
we
are
serving
in
that
that
expert
capacity
we'll
help
them
cover
their
their
first
kind
of
general
risk
assessment
through
their
completed
audit.
E
E
The
big
thing
that
we're
moving
into
in
the
next
period
so
between
december
and
the
next
audit
committee
meeting
it's
one
of
the
most
important
functions
we
provide
to
the
city
and
that's
our
2022
enterprise
risk
assessment
each
year.
We
do
this.
The
risk
assessment
through
surveys,
interviews,
research,
just
general
best
practices,
research
to
gather
information
at
the
the
top
risks
the
city
is
facing
in
2022,
and
that's
what
informs
our
audit
plan.
E
This
is
a
very
big
project
because
we
want
to
gather
as
much
information
from
departments
as
we
possibly
can
in
our
own
research
and
again
that
that
enterprise
focus
we're
always
appreciative
of
the
amount
of
information
enter
the
department
leadership,
all
the
way
down
through
every
staff.
Member
that
we
can
contact
how
much
information
we
get
back
and
that
that
accurate
and
and
real-time
information
from
them
is
really
what
helps
them
form
the
audit
plan.
E
So
I
would
anticipate
this
appearing
at
the
next
audit
committee
meeting
the
enterprise
risk
assessment,
along
with
a
pretty
comprehensive
set
of
recommendations
for
how
to
update
the
audit
plan
for
2022
now
we'll
be
getting
surveys
shortly.
So,
thank
you
tell
my
team
they've
done
an
excellent
job
on
a
lot
of
enterprise
projects
of
late.
I
believe
there's
an
announcement.
A
On
this
one,
do
any
of
my
colleagues
have
questions
about
the
rest
of
this
report?
A
Our
next
part
is
announcements,
and
yes,
I
would
I
can
go
ahead
and
kick
it
off
with
just
a
prospective
one.
A
question
that
I
often
get
is
what
will
happen
with
our
audit
committee
with
some
of
the
legislative
changes
happening
in
our
city
and
how
will
we
start
off
next
year
next
term
that
way?
A
A
A
I
anticipate
first
quarter
next
year
to
to
to
reframe
it
in
in
light
of
our
new
government
structure,
but
until
then
I
am
I
I
have
to
say
I
in
conversations
with
people.
I
really
appreciate
having
civilians
on
this
committee.
I
really
appreciate
having
park
board
participation
on
this
committee,
and
so
I
do
hope
those
things
will
continue
into
the
future,
we're
just
not
sure
what
those
are
yet.
A
This
is
a
it
is
a
bittersweet
day,
and
that
is
our
last
audit
committee
of
the
year,
but
it
is
also
huge
and
so
lots
last
committee
meeting,
and
that
makes
me
really
sad.
Ms
esso
lot,
you
know
she
moved
here
from
chicago
several
years
ago.
I
think
six
years
ago,
but
she'll
correct
me
or
director,
patrick.
You
can
correct
me
if
I'm
wrong,
you
know
I
am.
A
I
was
thrilled
to
have
such
a
poised
professional,
come
into
the
audit
department
and
to
become
part
of
the
audit
team
and
she
quickly
she
she
was
the
only
woman
in
the
office
for
quite
some
time
and
and
really
held
her
her
own
I've
enjoyed
getting
to
know
you,
ms
s,
a
lot.
I
know
that
when
you
were
here
in
city
hall,
we've
both
gone
through
pregnancies
together
at
city
hall,
and
I
have
to
say
it
didn't
matter
to
you.
A
You
were
the
most
fashionable
person
at
city
hall
all
of
the
time,
and
I
don't
know
how
you
did
that,
but
mostly
I've
been
so
impressed
with
the
the
skill
and
your
your
ability
to
form
relationships
across
the
city,
enterprise
and,
and
I'm
just
I'm
going
to
miss
you
terribly,
even
though
we
haven't
seen
each
other
in
person
for
quite
some
time.
A
Ms
esolat
really
pioneered
how
our
entire
audit
function
would
work
remotely
when
her
family
needed
to
make
a
move
out
of
state
and
she
was
able
to
you
know
we
set
up
the
audit
department
to
function
where
she
could
access
the
files
and
such
and
and
be
still
the
manager
for
the
audit
function
and
that
really
helped
when
we
all
had
to
swoop
into
covid
mode.
A
E
Thank
you,
chair
palmisano.
I
too
am
sad
to
say
that
this
is
your
last
meeting
miss
that's
a
lot.
I
came
on
board
in
audit
in
february
of
2020
by
march
the
pandemic
was
kicking
off
by
june.
E
The
world
was
changing
as
we
we
grappled
with
so
many
things
in
the
city
of
minneapolis,
and
I
can
I
can
state
unequivocally
that
I
would
not
have
been
successful
in
this
role
without
all
the
support
and
the
hard
work
that
you
get
has
put
into
making
internal
audit
the
function
it
is
today,
she's
been
an
asset
to
the
city
that
I
she's
quiet
and
not
always
up
front,
but
she
has
provided
a
service
to
the
city
that
that
is
unmatched,
I'm
so
thankful
of
had
the
opportunity
to
work
with
you
and,
like
chair
palmosano,
said.
E
I
think
we've
only
met
in
person,
maybe
once
or
twice,
but
we've
been
working
together
for
a
long
time.
I
know
that
wherever
she
goes
she's
going
to
be
successful
in
her
career,
so
I
just
wanted
to
say
publicly
on
the
record.
Just
thank
you
so
much
for
all
the
service
you
provided
to
the
city.
Very
sad
to
see
you
go,
but
I
know
wherever
you
go,
the
the
organization
is
going
to
be
better
off
having
you
there.
J
Thank
you
very
much
nina
yeah
and
I
mean
yeah.
It's
upset
to
be
leaving
as
well,
but
yeah
I've
enjoyed
working
with
all
of
you
and
I'm
happy
to
have
contributed
to
some
extent
to
the
department
and
to
the
city,
and
I
know
you
all
do
great.
So
thank
you
very
much.