The town adopts the following principles in explanation of the pertinent standards above and directs that such principles be followed at all levels of town government:
(A) Control environment.
(1) The Oversight Body and management demonstrate a commitment to integrity and ethical values.
(2) The Oversight Body oversees the town’s internal control system.
(3) Management establishes an organizational structure, assigns responsibility and delegates authority to achieve the town’s objectives.
(4) Management demonstrates a commitment to attract, develop and retain competent individuals.
(5) Management evaluates performances and holds individuals accountable for their internal control responsibilities.
(B) Risk assessment.
(1) Management defines objectives clearly to enable the identification of risks and defines risk tolerances.
(2) Management identifies, analyzes and responds to risk related to achieving the defined objectives.
(3) Management considers the potential for fraud when identifying, analyzing and responding to risks.
(4) Management identifies, analyzes and responds to significant changes that could impact the internal control system.
(C) Control activities.
(1) Management designs control activities to achieve objectives and respond to risks.
(2) Management designs the town’s information system and related control activities to achieve objectives and respond to risks.
(3) Management implements control activities through policies.
(D) Information and communication.
(1) Management uses quality information to achieve the town’s objectives.
(2) Management internally communicates the necessary quality information to achieve the town’s objectives.
(3) Management externally communicates the necessary quality information to achieve the town’s objectives.
(E) Monitoring.
(1) Management establishes and operates monitoring activities to monitor the internal control system and evaluate the results.
(2) Management remediates identified internal control deficiencies on a timely basis.
(Ord. 2016-5, passed 7-19-2016)