§ 30.18 PRINCIPLES OF INTERNAL CONTROL STANDARDS.
   The town adopts and directs the following principles in explanation of the pertinent standards listed in § 30.17 of this chapter, which are to be followed at all levels of the town’s government.
   (A)   Control environment.
      (1)   The oversight body and management demonstrate a commitment to integrity and ethical values.
      (2)   The oversight body oversees the town’s internal control system.
      (3)   Management establishes an organizational structure, assigns responsibility and delegates authority to achieve the town’s objectives.
      (4)   Management demonstrates a commitment to attract, develop and retain competent individuals.
      (5)   Management evaluates performance and holds individuals accountable for their internal control responsibilities.
   (B)   Risk assessment.
      (1)   Management defines objectives clearly to enable the identification of risks and defines risk tolerances.
      (2)   Management identifies, analyzes and responds to risks related to achieving the defined objectives.
      (3)   Management considers the potential for fraud when identifying, analyzing and responding to risks.
      (4)   Management identifies, analyzes and responds to significant changes which could impact the internal control system.
   (C)   Control activities.
      (1)   Management designs control activities to achieve objectives and respond to risks.
      (2)   Management designs the town’s information system and related control activities to achieve objectives and respond to risks.
      (3)   Management implements control activities through policies.
   (D)   Information and communication.
      (1)   Management uses quality information to achieve the town’s objectives.
      (2)   Management internally communicates necessary, quality information to achieve the town’s objectives.
      (3)   Management externally communicates necessary, quality information to achieve the town’s objectives.
   (E)   Monitoring.
      (1)   Management establishes and operates monitoring activities to monitor the internal control system and evaluate the results.
      (2)   Management remediates identified internal control deficiencies on a timely basis.
(Ord. 2016-4, passed 5-17-2016)