Coraggio Consulting Loudoun County School Board, Audit Committee, Wednesday, August 5, 2026 Date: Wednesday, August 5, 2026 Place: Loudoun County Public Schools / School Board meeting (see BoardDocs / LCPS-TV) Length: 53m (video) Official meeting video (Vimeo / LCPS-TV): https://player.vimeo.com/video/1216309423?rel=0 BoardDocs (School Board): https://go.boarddocs.com/vsba/loudoun/Board.nsf/Public Machine transcript (speech-to-text) produced by Coraggio Consulting. Not an official county record. Names and numbers may be misspelled; check the video at the timestamp before quoting. Speech-to-text: whisper.cpp, model large-v3-turbo. Produced 2026-10-11. Timestamps are [HH:MM:SS] into the meeting video. ---------------------------------------------------------------------- [00:00:03] - Good afternoon, very fancy new mics. Good afternoon, everyone. Thank you for joining us for the August 5th, 2026 meeting of the Audit Committee. Apologies for being late, I got hung up at my day job. [00:00:20] Thank you all for being here. I am Anne Donahue, I am the at-large member and chair of this committee. With me is Ms. Amy Riccardi, the Sterling District member and member of this committee. Mr. Pepper is not joining us today. As a reminder, this meeting is being audio recorded. [00:00:38] It is not being live streamed and it is not being video recorded, but it is being audio recorded and the audio recording will be available to review later on the LCPS website. With that, we will get started. The first item on our agenda is public comment. Seeing that we do not have any public commenters signed up, we will move on to item number three on our agenda, which is the minutes. [00:01:02] The draft minutes from our June 17th meeting were posted on board docs. Hopefully we've had the chance to review those. If there are any changes that need to be made, I will entertain a motion or request for any such changes. [00:01:17] And if not, I will entertain a motion to approve the minutes. So moved. And I will second that motion being properly moved and seconded. All those in favor, please raise your hand and say aye. Aye. motion passes unanimously with the two board members who are present okay now we will move on to our item number four our information item the audit recommendation follow-up mr woods the floor [00:01:46] is yours thank you chair donahue members of the committee today i am presenting the fiscal year 2027 audit universe and the recommended audit topics identified through our annual planning process the objective of today's discussion is to review the risk-based audit universe understand the rationale behind the endorsed topics and receive committee feedback regarding priorities for the fy 2027 audit plan as always our goal is to direct limited audit resources towards areas [00:02:26] that present the greatest organization organizational risk compliance exposure operational impact, and public accountability considerations. Next slide please. As part of our annual risk assessment process, we evaluated risks across the division through interviews, surveys, document reviews, environmental scanning, prior audit results, organizational priorities, and professional judgment. [00:02:57] That assessment culminated in an audit universe consisting of 38 audit topics. We then performed a secondary prioritization these topics considering factors such as organizational impact governance significance compliance requirements financial stewardship student safety cyber security exposure and overall risk to the division based on that analysis 13 topics were endorsed for committee consideration an important consideration throughout this process is audit capacity the oag currently [00:03:35] conducts approximately four to six audits annually while maintaining professional standards quality assurance requirements and advisory responsibilities. As a result, the objectives was not simply to identify risk, but to develop a balanced portfolio of audit opportunities that provide the greatest organizational value by remaining realistic and achievable. Next slide. This slide summarizes the outcome of the planning process. Of the 38 areas assessed, 13 audit topics are endorsed for consideration. Ultimately, however, committee priorities and available [00:04:14] resources will drive the selection of approximately four to six audits for execution during the fyi 2027 fiscal year the endorsed list the endorsed list reflects a diverse portfolio of risks affecting governance finance human capital technology operations student services safety and compliance the intent is to ensure the audit plan remains balanced and aligned with the the division's most significant risk and strategic challenges next slide on this slide you'll see the [00:04:52] first group of endorsed topics within governance and oversight we identified employee reporting mechanisms and retaliation complaint oversight this topic addresses organizational culture reporting transparency and confidence in internal accountability processes within financial stewardship procurement controls and threshold compliance is endorsed because procurement activities involve substantial financial expenditures and compliance requirements. Under human capital, staffing allocation equity was identified due to its direct relationship to [00:05:29] resource distribution and workforce effectiveness. For student services, student discipline practices and equity is endorsed because of its significance to student outcomes, consistency of implementation and equity considerations. Finally, within safety and security, two topics were endorsed. [00:05:51] cross-school student safety information sharing and physical security controls and access management both areas have important implications for student safety operational effectiveness and risk mitigation the second group of endorsed topics focuses on several additional high-risk areas cyber security preparedness and incident response remains a priority due to increasing threats to information systems and sensitive data within operations and facilities we identified facilities [00:06:30] maintenance equity and backlog school nutrition programs and vendor contract oversight these topics affect operational effectiveness efficiency regulatory compliance resource management and services delivery in the area of transparency and compliance FOIA compliance and record management along with ethics and conflicts of interest were endorsed because of their importance to public trust and governance. Finally, federal grant compliance was endorsed due to the financial [00:07:05] regulatory and reputational risks associated with federal funding requirements. Next slide. Priority categories and portfolio balance. This slide illustrates the overall balance of endorsed portfolio. Rather than concentrating audits within a single risk area, we intentionally developed a portfolio that spans governance, ethics, financial stewardship, technology, operations, student services, safety, and human capital. This balanced approach helps ensure that our audit resources [00:07:42] address both traditional financial risks and emerging operational cybersecurity and student focus risk. The endorsed topics collectively represent a comprehensive view of risk across the division, and provide multiple options for selecting the final FY27 audit plan. [00:08:06] Next slide. An equally important part of the planning process involves deciding which topics should not move forward currently. I want to emphasize that deferred topics were not considered unimportant or low risk. [00:08:24] Rather, they were deferred for practical planning reasons related to timing, capacity, readiness, expertise, and audit sequencing. For any committee member interested in additional detail, the full rationale supporting each individual decision has been documented and is available upon request. [00:08:49] There were four primary reasons why 25 topics were not endorsed this year. First, limited audit capacity. With a three-person audit team, we must remain selective to ensure audits are completed thoroughly and in accordance with professional standards. [00:09:06] Second, specialized expertise. Some topics require technical capabilities or core co-sourced support that are not currently available. Third, data and trend readiness. Certain audits would be more meaningful after additional data becomes available or trends mature over time. [00:09:28] Lastly, scope and stakeholder readiness. Some topics require further definition, coordination, or stakeholder engagement before an audit can be conducted effectively. Importantly, deferred topics remain part of the audit universe and will be considered during future planning cycles. [00:09:51] This slide provides examples of how those factors influence special decisions. Capital projects was deferred primarily because of resource limitations and is already identified as a potential FY28 engagement. Oracle ERP implementation was deferred due to the need for specialized IT audit expertise and potentially outsourcing support. [00:10:17] Several workforce-related topics, including workforce capacity, succession planning, and enrollment forecasting, were deferred until additional data and organizational decisions provide a stronger audit foundation. Interdepartmental coordination and program evaluation require additional scope definition before fieldwork can produce meaningful results. [00:10:42] Finally, compensation equity and internal investigations require substantial stakeholder cooperation and data accessibility. Conducting those audits prematurely could result in incomplete findings and reduced audit value. These are examples that demonstrate the deferral decisions were strategic and practical rather than reflections of topic importance. [00:11:07] This concludes the presentation at this point. I welcome the committee's feedback regarding these audit topics and any perspective going forward as we move into developing the audit plan. Thank you. - Thank you very much Mr. Woods for that summary and outlining what we're here to do today. [00:11:29] So your list of endorsed audit topics is still quite a bit longer than what you have indicated is realistic, right? 13 endorsed topics, and we're supposed to select four to six out of those. [00:11:47] What would your recommendation be as to what do you think our top priorities should be? - Yes, thank you for the question. Right off the top of my head, I would say cybersecurity preparedness and incident response. [00:12:04] Just given the nature of everyday threats to cybersecurity and the fact that this area has not been covered by the office in prior audits. Facilities, maintenance, equity, and backlog. [00:12:22] Another area that is, we haven't covered, but also it provides coverage in a different area. And so you would be able to perform audits that are not overlapping in nature. And so you would kind of broaden the scope of the office, doing two completely different types of audits. [00:12:40] So those two jump out at the top of my head. As I look through the rest of them, physical security controls and access management is another one. [00:12:56] Recently, the support services has outfitted many of the schools with new festivals to secure their premises at schools. Now that a majority, I believe, of that work is complete, I think that's a good area to go in and now review the process around entering our schools. [00:13:18] So physical security at schools, which would be number 25, physical security controls and access management. Another one would be procurement controls and threshold compliance, just given the dollar amounts is always high risk in that area. [00:13:45] And so again, this is another topic that is completely separate than the other three, helping us cast a wide net of the office resources. So number nine, procurement controls and threshold compliance. So that's a minimum of four, which would be the minimum that we ask for an annual audit plan. [00:14:05] And so the next two, I think, would be bonuses at this point. If you'd like for me to continue, I can provide my thoughts on the next two as well. Before we get to that, I would like to ask you about topic number 24, LCPS Sheriff's Office Information Sharing Protocols. [00:14:25] Do you recall why that one was not listed among your endorsed audit topics? [00:14:40] No, I don't know why that was left out in the endorsements. [00:14:56] I will say that we do have a cadence in our meetings with LCSO and LPD. We have MOU with them. the, and so I'm very aware of the practices. And so on that one, I would defer to the committee if they would like that to be an audit that we perform. But I do think that is one that would not need to be deferred. I would imagine that one is one that you would need cooperation [00:15:30] from people outside of the LCPS system to be able to, I shouldn't say, I assume, would you need the cooperation of individuals outside of the LCPS system to successfully complete that audit yes it would it would definitely help corroborate what we do on our end with the third-party resources that are also part of the practices so yes thank you mr. Cardi I'm just gonna jump in on that one because I have a question about that too does the sheriff's office to your knowledge [00:16:04] have an oag office they more than likely have an internal audit office I don't believe they would have an oag office but they would probably be governed by the county and so that office may sit at the county level and not at the sheriff's office and so would you coordinate with them on that one if if that was to get selected i don't know enough about how that all works yes i would reach out to first the county's the county sheriff and leesburg police department and ask them if they do have that department and then help [00:16:41] coordinate that through them and how i would go about that is i believe the chief of staff here and LCPS is responsible for the MOU between us and the Sheriff's Office. And so I would coordinate with that individual to contact the point of contacts at the Sheriff and the Leesburg Police Departments to get that information. [00:17:02] Thank you. Thank you, Mr. Woods. Mr. Allen, good afternoon. I was wondering if Division Counsel's Office had had an opportunity to take a look at the audit topics that are being recommended and if Division Counsel's Office had any recommendations as to any opinions on these audit topics, if there are any that from a legal perspective you think would be in our interest to pursue or to not pursue at this time or any other legal considerations [00:17:40] that we should perhaps consider in this decision-making process. Thank you, Chair Donahue. I do think these are very thoughtful topics. What I will say is, just as a general premise, some of these have quite a narrow focus. [00:18:01] And in terms of what the findings may yield, may present information that is better presented to the board in a closed session. For instance, the employee reporting mechanisms and retaliation complaint oversight, I think that information will be quite helpful for the board and its oversight of the school division. [00:18:24] However, given the narrow focus of that request, that is to say retaliation complaints, I'm not sure how frequent or rather the volume of such complaints LCPS receives, but my concern from a legal lens would be that an audit of that limited scope and breadth could potentially divulge information that a reasonable person could connect the dots and identify an individual LCPS employee. [00:18:48] And again, we don't know what we don't know. so to the extent Mr. Woods and his team's findings come back and include information that could potentially divulge information about identifiable individual LCPS employees, that presentation of the findings and report would be more appropriate to share in closed session to safeguard the employee confidentiality. [00:19:09] I will also say with respect to the physical security controls and access management, cyber security preparedness and incident response, those types of information based on findings would also be appropriate to present in closed session under the Virginia Freedom of Information Act where that information could jeopardize safety of persons or facilities or buildings. [00:19:36] Thank you, Mr. Allen. Mr. Woods, you and I talked offline about some of these topics, and you had explained to me some kind of interplay between a couple of the procurement-related topics, and I was wondering if you could address that. [00:19:57] Hopefully that was enough for you to go on. It was a while ago that we talked. Yes. So some of these audits have overlapping reviews, and so you may be able to not perform one audit because another audit may cover an area that is equally high risk on both audits. [00:20:31] And so to perform one audit, so if you had to choose between the two audits, one of them may be more better suited in choosing another one. So that's why I referenced the procurement controls and threshold compliance. [00:20:54] Just because the controls over this cover so much in procurement and regarding thresholds that you may not need to do some of these other ones, such as board authorization and major financial commitments, just because you would cover a lot of the areas in the scope of procurement controls, and so that's why. [00:21:19] But also, they would have varying scopes, but again, the procurement controls and threshold compliance would cover many of the aspects in the board authorization and major financial commitments on a topic that you can just do one or the other. [00:21:36] You wouldn't need to do both. Thank you for that refresher. And you also indicated that Mr. Pepper, although he's not able to join us today, had passed along to you some thoughts of his positions with regard to various of the proposals here? [00:22:00] Yes. And my understanding was that he had indicated to you he would support, including in the audit plan, topic number 26, cybersecurity preparedness and incident response, topic number 26. [00:22:16] 31 school nutrition program funds sustainability and topic number 38 federal grant compliance Correct and and also that he was opposed to topic number five employee reporting mechanisms Yes, and that was the extent of his feedback correct. Thank you. Mr. Carty. Thank you so much. So I'm I'm always amazed at the breadth and depth of these topics and I think one of the [00:22:51] I mean, I think I have my list of in some kind of order, which I think is helpful. But in doing that, too, I think part of it is I'd like to be able to factor in the scope. And once you once we once we get this narrowed down, I think it would be really helpful then to understand what questions the audit would answer or might answer or potentially could answer. [00:23:17] And maybe the ones that it wouldn't be so that we just have some more clarity around that, which I'm sure we'll get to at some point in time as we get down range on this on this project. but I appreciated having Mr. Pepper's feedback in yours as well and Miss Donnie you'd be really curious to know during this conversation I'm sure we'll get into that but I think some of mine pretty much align with yours and I don't know if we want to do that now or if we want to wait to our next item to go into those you tell me oh I think they kind of bleed into yeah so it's I think the next one is just a vote and this one we can talk about prioritizing which ones that we want [00:23:56] approve I think it makes sense to continue the conversation right now because if we if we move into action we have to have a motion and a second to have discussions easy great so I'll be happy to do this so I agree on number 38 which is the federal grant compliance the title one I IDA and e-rate discussion mice and I'm just gonna kind of go through the list I don't have these I have them in order but it doesn't really matter number 34 the FOIA compliance and records management we hear a lot from the public about concerns about foyer requests [00:24:33] charges fees timing of it so i think having a much more under better understanding of the foyer compliance and records management component would be really helpful number i'm kind of going from the bottom up number 30 i have facilities management and backlog which seems to be one of your preferences as well and pretty clear number 26 the cyber security preparedness and incident response I think that's definitely a helpful one number 13 staffing allocation equity and then number nine which is the procurement controls and threshold compliance we've talked [00:25:09] about this a little bit in F&O but I think that having an audit of that would be really helpful as well so that should be one two three four five that should be six although to be honest with you we could go on on any of these I mean all these are going to give you great information so getting us down whittling it down gets really tight but I think these are the ones that are going to give some interesting information um i had somehow kind of glossed over number 24 which is the sheriff's office information sharing um i know that we have i'm not sure where we are in it but i know we have [00:25:44] our special committee that's doing something along with that but that might be interesting to inform that group i don't know because you're you're on that right uh nominally but we have not had any meetings yet so that was that was why i raised that question because i somewhat tried to decide if this is a chicken-and-egg situation, if that committee ever does actually stand up and start having productive meetings, would they be in a better position to address this information sharing? Or would Mr. Woods be in a better position to gather information that could then be of use to that committee in the negotiations if they eventually are [00:26:22] able to actually schedule meetings? I would hope that we just get that resolved as soon as possible, regardless of where the timeline is on that project if we choose it. It also may be an interesting topic to do after we sign an agreement. I don't know. I'm not sure It could go either way on the timeline on that for sure. So do you have kind of a list of preferences? I do in my my preferences were number five employee reporting mechanisms and number 19 student discipline practices and equity [00:27:02] 19 number 19 student discipline practices and equity number [00:27:23] 23, cross school student safety information sharing, which again, Mr. Woodson had discussed that a little bit with me offline, and he pointed out, right, when a student is transferred into the district from another district, we receive a pretty significant thorough package of information about that student, but if the student is transferred from one school within loudness necessarily the same breadth of information that goes with the student to the new [00:28:02] school so digging into that yeah could be useful information but those were my top three and possibly number 24 which is not to say that i'm opposed to some of these other ones but those were my top choices your first one actually was on was on my list as well but um i specifically because i've been hearing from a lot of teachers over the last couple of years about concerns about [00:28:37] retaliation and i had raised the question with mr allen um but you asked him earlier so he kind of got to it which was helpful is just i want to make sure that the body of people that would be in that is significant enough to where we wouldn't have there wouldn't be any opportunity to disclose personal or people could be identified in that process so i don't know how big the population is do you have any sense of that uh no we'd have to uh inquire i will say there is a cba now in place, which makes it complicated but not undoable. [00:29:11] So it's just that we'd have to make sure that if we're looking at historical records, the CBA wasn't applicable going forward, it is. And so if we're looking at historical records, how would that factor into something that is no longer or may no longer be a practice with the CBA now in place? [00:29:35] And so going forward, has that CBA been here long enough to work its way through the system of grievances and complaints? So it's not undoable. It's just a little bit complicated than the new CBA signed earlier this year. [00:29:54] If I could chime in about that, because I was on the previous HRTD committee when it still existed before the CBA was signed. And when the recommendation by staff was made to essentially suspend or do away with that committee because most of the topics that would come before that committee would be addressed by collective bargaining or would be potentially suitable for being addressed by collective bargaining and to the exclusion of not being appropriate for consideration by the board. [00:30:29] And one of the concerns that I had at that time when we said, okay, fine, we'll get rid of this committee, was things that are not addressed by the CBA and concerns, if the board has concerns, you know, how those would be addressed. [00:30:45] and so that frankly that is one of the reasons why i pushed to form this committee was in the hope that there would be another mechanism to review in areas where the board has you know may potentially have some concerns in areas that are not covered by the cba and i would just say too i mean i regardless a cba or or not i mean i still think that this committee has the ability to do audits on whatever topic we want to whether it's in the collective bargaining agreement or not i think that is our opportunity to just look to see that we're following best practices and the [00:31:23] cba or whatever else is going on at the time but um i'm concerned about the retaliation piece from a number of perspectives and one is particularly is recruiting and retention of staff um and making sure that we're focused on what we need to be focused on so it's it's i'm glad you mentioned it because it's it was definitely on my list as well so how in the world do we whittle this down sounds like we're in agreement about number five so we have one right number five um i should know [00:31:56] the answer to that because i i was on la and p when we did this last year but um well mr woods you heard i don't know if you were if you were making notes but you heard ms ricardi and myself express the topics that we were the most interested in did you have any feedback on our proposed [00:32:29] topics uh i didn't know the only feedback i really have is on number five and i expressed those opinions um and i am more than glad to perform the audit if approved other than that um all 13 as mentioned are endorsed to perform with the addition of the lcps sheriff's office information sharing protocols i would say that is is one we should consider as well um looking at the other ones i think cyber security preparedness and incident response should also be considered it [00:33:05] was expressed by mr pepper and by amy or miss ricardi so that's another one so number 26 and number five are the only two i can say right now before the discussion ends that i think we should definitively uh consider the other ones i will leave up to the committee to decide mr allen i did ask you the general question of if you had any feedback on the on the proposed topics but [00:33:42] specifically the uh the foia compliance topic did you have any thoughts concerns feedback related to the proposed FOIA compliance which is number 34. [00:34:00] Thank you for the question chair Donahue. I don't necessarily have any strong feeling one way or the other FOIA does have a five person went to law five business day turnaround in terms of fulfilling that request and you can extend it to for an additional seven business days so the timeliness timeliness piece um i don't know if board members hear concerns from constituents on whether those are met but we strive to fill those within our legal [00:34:37] requirement and so i i don't know if that's one that the board or the committee might want to defer in light of some of these other safety or security or other concerns that might be more timely or pressing um do we do we are we on the receiving end of a large number of lawsuits alleging that we're in violation of foia thank you for the question chair donahue there's only [00:35:13] been one foia petition that's been filed um since i've been uh employed with lcps in the past four and some change years here. So I will say there's quite a few FOIA requests that come in any given week. [00:35:33] Perhaps a dozen a week would be a fair estimate for a variety of public records. And so there's been one. Thank you for that, Mr. Allen. Ms. McCarty, you and Mr. Pepper were both in support of number 26, cybersecurity preparedness and incident response which does seem as it is security related seems like it would be a good one to prioritize and you also were both in favor of the federal grant [00:36:08] compliance topic number 38 6 38 i i guess my inclination on the foia one would be to wait because we do receive a large number of foia requests for sure and there is there is at least occasionally some discontent among the public for how we respond to it but if we've only been [00:36:43] sued once to me that suggests that even if some people are unhappy with how we are responding that that to me that suggests that the the risk is less but what are your thoughts on the FOIA piece I mean I think there's other ways that we can get some of those questions answered I think more more directly so i'm perfectly fine to skip over that i mean i'm i'm concerned about the ones [00:37:21] that are kind of the security and you know the physical security controls access you'd mentioned that um mr was that that was one that was number 25 was a priority for you um where did that what group of people did that request come from do you know uh i believe this would have been a survey and response um principles that's good that's helpful that may be another one that this is that that process i mean all of our schools have got their vestibules set up now and constructed i don't [00:38:01] know we haven't audited yet but i believe so when this topic first came up uh in a year or so ago uh they were in the process and so now i believe they should be mostly outfitted with the uh the barriers i don't know if it's 100 can you remind me what the top couple were for principals and staff from the survey do you have do you have that no no okay sorry that's right well even if we even [00:38:36] if we limited this plan to only those topics that relate to student safety or campus safety and security i think we would end up with more than four um topics yeah do we have four uh i had five 24 26 and 38 yeah if you're if you're in agreement to proceed on 24 i mean so we do have four [00:39:11] You know what would be really, I think, helpful is if, Mr. Woods, if you could take a look, and you tell me what you think about this, but if you take a look at these four for our next meeting and say, look, these four are going to max out our workload threshold. [00:39:28] Let's just stick with four, then we've got our four. But if you come back and say, you know, we might have room for another one when Mr. Pepper's here, maybe we can sort out a fifth, unless you feel like you really want to sort out a fifth one right now. Well, my understanding was that Mr. Woods was hoping we would vote on the audit plan today so that his office can start following up, investigating, and implementing. [00:39:49] Yes, so both review it, can assess whether we can get through the four in a year and if there's room to add one or two in the next meeting. Do you have a sense right now, Mr. Woods, if we were to approve the audit plan consisting of number five number 24 number 26 and number 38 do you have a sense right now of how that would [00:40:26] work out logistically for you and your team uh yes uh number five would be the most complicated um given the sensitive nature uh take some time number 26 would be the probably the shortest just because they should have a incident response plan already you have to be reviewing that plan and see and get into action. Number 25 is a physical security controls and access management. It would [00:41:02] require site visits, which could take time coordinating with the schools. So that would be some time along with number five. And then number 24 would also be, it just would be dependent on the third parties outside of our control and getting access to them. But I don't think that one should be too complicated. So 24 and 26 would probably be these complicated [00:41:33] in the individuals we work with. 38 is highly regulated, the federal grant compliance. And so we already have the criteria or criteria exists in the form of federal regulations, and it's basically going to make sure we follow those. And we have the requisite documents to support those grant compliance uh and so i do think we could get through uh for within the next [00:42:09] 12 months i'd say that 12 months starting september 1 as opposed to august 1 and what about number 23 if we were if you were to take on number 23 how do you have a sense of how difficult or time-consuming that would be or wouldn't be well the first we have to determine how many students actually went through that process uh if there's not a lot of students then it wouldn't require much resources but if it is a substantial amount uh then it would require quite a bit of coordination [00:42:45] because we'd have to talk to the sending off school and the receiving school and to coordinate those separate meetings and sometimes to talk to all three parties and I include myself at three the sending school the receiving school and my office and sometimes that could be a bit tricky given uh how busy principals can be at the school level uh and so though not complex it is difficult getting everybody's schedule to align um and so that's where the uh the obstacles would come into [00:43:21] play and i think that's a lot of the audits just because everybody is so busy um this one day would be paramount that those two schools principals would be available to us more than once during the audit are there any other ones that aren't of these four that we have identified that you're just like wow they've missed the boat on this we really need to add this one other thing one or two [00:43:59] that you're like wow i wish they'd looked at this one more well i think the most glaring one for me would be cyber security preparedness and you did that um i do worry about number five and you hit that one but the only thing and not worrying from a cba standpoint worrying about from a the retaliation complaint issue i think you did that um i do worry about the cba and the complexities of it but i don't think it's nothing i do think we could definitely perform it um [00:44:31] other than that i think they're all pretty equal uh you're gonna you're gonna touch a lot of departments with the audits you picked so i think just having a coverage is going to be okay if regarding the other ones number 30 you had indicated was also the facilities maintenance equity backlog a different kind of um project i would say but that one would feed into the [00:45:11] sip priority you know cip priorities so if you do physical security controls and access management you're covering a facilities type review as well uh it's not going to be the it's not going to have an equity component to it but we would be able to identify if some schools are in lesser conditions than others it wouldn't be robust but we would definitely physically see the perimeter to provide [00:45:48] feedback so you're saying if we added 25 that would cover some sub part of what 30 would cover it would but if you if you wanted to choose one or the other great i wouldn't choose both [00:46:32] or to your prior suggestion we could approve the four and add later if we think it's appropriate i would actually i wouldn't mind doing that and the reason why is that after you've had a month to take a look at this and figure out a work plan and whatever you're going to provide um we and we'll approve this now right so these are the four to get started with um as you're going through this you may say you know come back at the next meeting and say hey you know we've thought about this a little bit more and we think that we can add this other one would be complimentary like we just talked about in these two or um hey this is enough for now if we get through this then maybe in january we come back and say hey we've got bandwidth for another [00:47:09] one i you know i'm saying i think there's just an opportunity then to plus the priorities here might shift in the next couple months and something may surface that we're just like wow we really need to add this and yes if giving if given a month we could assess um what it would take to complete the four and provide feedback if one or two need to be added whether at the september meeting or later throughout the year that works for you but in your team mr words yes sounds great [00:47:45] uh okay uh in that case um we need a motion sure go for it all right i move that the fy 2027 audit plan includes item number five employee reporting and retaliation oversight number 24 lcps sheriff's office information sharing item number 26 cyber security preparedness and incident [00:48:22] response right and then number 38 federal grant compliance title one idea and e-rate i will second is there any additional discussion no i think we're good being none uh the motion is improperly moved and seconded all those in favor please raise your hand and say aye aye aye motion passes unanimously with the two members who are present uh so that will be our at least the beginning of our audit plan and mr woods we will look forward to um to an update from you in september or october [00:48:59] whenever you have an update to share uh so we kind of skipped ahead there to our action item number five um was there is there anything else related to that okay uh item number six is new business um i have new business uh we i originally asked to schedule our meetings on wednesday evenings because mr pepper and i are on another committee that also previously used to meet on wednesday evenings so to try and be more efficient for us our other committee has switched days and is now [00:49:38] meeting on the first thursday of the month and i wanted to discuss the possibility of considering making a change to move our standing day and time slot for this committee to uh to be different from the first wednesday of the month so mr woods hypothetically if we were to ask if if this committee could be rescheduled to fall on the first thursday of the month is that something [00:50:11] that could potentially work for you and your staff yes um my other committee meets from four to five so in an ideal world i would love to try and meet the first thursday of the month at 5 30 pending so i have my standing board tour from one to two here so i'm going to literally be waiting until we start so i just say the sooner we could do it the better but if 5 30 is it then is that [00:50:46] is that uh committee meeting usually run the solid hour um 45 minutes yeah i mean we can do we can do that except i'm not available on october 1st which is the first thursday of the month but [00:51:17] i could do the 8th if that works for you mr carty and you mr woods yes i'm here i may not be here on the 8th but we can figure and we can figure it out for that one but if you just generally want to make the standing to move this to thursday is at 5 30 the first thursday i should say i would like to if that could work works for me is that agreeable for you mr woods tentatively [00:51:59] the first thursday of september is the third just had it yes could we do the 10th the 10th should we just say the second thursday of the month that works for me that's better for you mr garty i think generally that'll work for me the eighth i may not be able to or i may have to do we have the option to dial in for these well i might have to do that i mean as long as as long [00:52:36] as there's two people in the room yes well I suppose we should check with mr. pepper so we don't have to make decisions about it now but I did want to address it publicly since these are public meetings that's great okay thank you for your flexibility mr. woods mr. Carty that was the only new business I had is there any other new business seeing none we will move on to item number seven adjournment our next meeting will be sometime in September TBD thank you everyone for coming and everyone get home safely ---------------------------------------------------------------------- Coraggio Consulting ยท aguyonx.com