Okaloosa County BOCC — April 5, 2016 — Request approval of the letter of engagement with Warren Averett for IT — agenda request

BOARD OF COUNTY COMMISSIONERS AGENDA REQUEST DATE: April 5, 2016 TO: Honorable Chairman and Members of the Board FROM: Zan Fedorak SUBJECT: Request approval of the letter of engagement with Warren Averett for IT Risk Assessment DEPARTMENT: Purchasing BCC DISTRICT: All STATEMENT OF ISSUE: Request approval of the letter of engagement with Warren Averett, LLC for the Information Technology Risk Assessment. (C10-1809-BCC) BACKGROUND & ANALYSIS: Warren Averett, LLC has a current contract to provide auditing services and related reviews. This contract allows additional services relating to accounting, auditing or special projects to be added to the contract. These services are billed at the current contractual rates. Warren Averett has provided the accompanying letter of engagement to perform an Information Technology (IT) Risk Assessment for the County’s current information technology (i.e. systems, infrastructure, communications, etc.) and relevant risk factors. Risk factors are categorized in three tiers: organization, mission/business process, and information systems. This process is part of the ongoing Fraud and Control Risk Assessment program, and was recommended by Carr, Riggs, and Ingram in their 2013 report. The total proposed cost is $48,500 with ancillary costs that may push the total to over $50,000, which requires the Chairman’s signature. Staff requests Board approval of the accompanying Warren Averett letter of engagement to perform an IT Risk Assessment. OPTIONS: Approve/Deny the Warren Averett letter of engagement to perform an IT Risk Assessment and authorize the Chairman to sign the document. (C10-1809-BCC) RECOMMENDATION: Staff recommends approval of the Warren Averett letter of engagement to perform an IT Risk Assessment and authorize the Chairman to sign the document. (C10-1809-BCC) RECOMMENDED BY: APPROVED BY: John Hofstad, County Administrator