Orange County NC Website
<br />~/1ART' I N •~+ 5 TARN E S <br />& ASSOCIATES, CPAs, P.A. <br />'A Prclfessio~taJ:4ssuciurion of Certified Puhlic Accor~ntunts and :~Llulragement Coi~sulfunts" <br />To the Board of Commissioners <br />Orange County, North Carolina <br />In planning and performing our audit of Orange County, North Carolina's basic financial <br />statements for the year ended June 30, 2010, we considered the County's internal control <br />structure to determine our auditing procedures for the purpose of expressing an opinion on the <br />financial statements and not to provide assurance on the internal control structure. We <br />previously reported on the Orange's internal control structure in our report dated November 11, <br />2010. This letter does not affect that report or our report on the financial statements dated <br />November 11, 2010. <br />During our audit, we noted certain matters involving internal controls and other operational <br />matters that are presented for your consideration. We will review the status of these comments <br />during our next audit engagement. Our comments and recommendations, all of which have been <br />discussed with appropriate members of management, are intended to improve the internal control <br />or result in other operating efficiencies. We will be pleased to discuss these comments in further <br />detail at your convenience, perform any additional study of these matters, or assist you in <br />implementing the recommendations. Our comments are summarized as follows: <br />Lack of Written Internal Control Policies. During our audit, we noted that the Finance <br />Department does not have written internal control policies. Management is responsible for <br />identifying and documenting internal controls and the objectives that they were designed to <br />achieve. During our internal control inquiries, we noted that controls are in place, are verbally <br />communicated, and are understood by finance employees. However, these controls have not <br />been properly documented and distributed as a formal department policy. Documentation of the <br />design of controls is evidence that the controls are identified, capable of being communicated to <br />those responsible for their performance, and capable of being monitored and evaluated by the <br />entity. <br />Recommendation - We recommend that the Finance Department prepare written internal <br />control policies. Internal controls should be documented for, but not limited to, the following <br />major areas: cash receipts, cash disbursements, payroll, and general ledger access. The <br />documentation should include information on user rights, who can access various accounting <br />modules, the approval process and data entry for budget amendments, budget oversight, and <br />journal entries. Management's documentation may take various forms, for example, entity <br />policy manuals, narrative memoranda, or procedural write-ups. In addition, the Finance <br />Department should continue to actively review and update internal controls for any changes in <br />department structure or transactions. <br />730 13th Avenue Drive SE ~ Hickory, North Carolina 28602 ~ Phone 828-327-2727 ~ Fax 828-328-2324 <br />13 South Center Street • Taylorsville, North Carolina 28681 • Phone 828-632-9025 • Fax 828-632-9085 <br />Toll Free Both Locations 1-800-948-0585 • Website: www.martinstarnes.com <br />