Fta Internal Control Self-Assessment Tool
Fta Internal Control Self-Assessment Tool
Fta Internal Control Self-Assessment Tool
AGENCY NAME:
DATE OF ASSESSMENT:
Instructions:
This form has been designed to provide transit agency management staff with the information
necessary to evaluate the agencys internal control and financial management system.
This form is based on the criteria for effective internal control as set forth in Internal Control
Integrated Framework published by the Committee of Sponsoring Organizations of the
Treadway Committee (the COSO Report), as well as the criteria for effective financial
management systems established by FTA, based on 49 CFR Part 18, Uniform Administrative
Requirements for Grants and Cooperative Agreements to State and Local Governments (the
"Common Rule").
This form is most useful when completed by individuals who have an understanding of internal
control concepts.
Each question should be answered by a check mark in the appropriate column (YES, NO, or
N/A). The questions have been prepared so that a positive (YES) answer will indicate a
satisfactory degree of internal control. A negative (NO) answer will indicate a potential control
weakness, which should be addressed if compensating controls do not already exist.
This form is divided into six major sections:
Section
Title
Page
I.
II.
III.
IV.
V.
VI.
Control Environment
Risk Assessment
Control Activities
Information and Communications
Monitoring
Key Accounts and Transaction Classes
2
6
8
10
12
14
This Internal Control Self-Assessment Form has been prepared and reviewed, as follows:
Prepared by
Date
Approved by
Date
NO
N/A
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
YES
NO
N/A
____
____
____
____
____
____
____
____
____
____
____
____
12. Is insurance coverage adequate for FTA grant-funded rolling stock and
other FTA grant-funded assets/equipment?
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
18. Is the agency's organizational structure appropriate for its size and
complexity?
____
____
____
19. Are there formal (written) job descriptions that clearly set out duties
and responsibilities?
____
____
____
20. Are backgrounds and references of applicants for financial, IT, and key
management positions investigated?
____
____
____
____
____
____
YES
NO
N/A
____
____
____
____
____
____
____
____
____
25. Are employees who handle cash, securities, and other valuable assets
bonded?
____
____
____
____
____
____
____
____
____
28. Does the agency require a minimum level of annual training for all
employees throughout the agency?
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
34. Does the agency have a board of directors or audit committee? If yes:
____
____
____
____
____
____
____
____
____
YES
NO
N/A
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
NO
N/A
____
____
____
2. Has management established objectives for key activities and are they
consistent with and linked to the agency-wide objectives and
strategies?
____
____
____
____
____ ____
____
____ ____
____ ____
____
____ ____
____
____ ____
____
YES
NO
N/A
8. Does agency management consult with its legal counsel regarding the
implications of any new legislation?
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
NO
N/A
____
____
____
a. Clearly written?
____ ____
____
____
____
____
c. Actively monitored?
____ ____
____
____
____
____
____
____
____
____
____ ____
____ ____
____
4. Does the agency have a documented system for ensuring that financial
and accounting records are proper, complete, orderly, and wellmaintained?
____ ____
____
____ ____
____
____ ____
____
____ ____
____
YES
NO
N/A
____
____
____
____
____ ____
____
____
____
____
____
____
____ ____
14. Are general journal entries and reclassification entries, other than
standard entries, required to be signed and approved by a responsible
official not involved with their origination?
____ ____
____
____
____
____
16. Does the accounting system provide in a timely manner the necessary
information for the preparation of financial statements and related
disclosures, as well as other required financial reports (internal and
external), in accordance with generally accepted accounting principles
or another comprehensive basis of accounting?
____
____
____
17. Does the accounting system maintain sufficient detail regarding FTA
grant activities, and the source (i.e., grant number) and application of
FTA grant funds?
____
____
____
____ ____
____
____
NO
N/A
____
____
____
Information
1. Does the agency have mechanisms in place to obtain relevant external
information (e.g., on market conditions, legislative or regulatory
developments, and economic changes) and internally generated
information critical to the achievement of the agencys objectives?
____ ____
____ ____
____
____
____ ____
____
____
____
____
____
____
10
11
YES
NO
N/A
____
____
____
____
____
____
SECTION VMONITORING
Section V of the form is designed to help the agency evaluate its monitoring system. Monitoring
is a process that assesses the quality of internal control performance over time. It involves:
NO
N/A
____
____
____
a. Investigated timely?
____ ____
____
____ ____
____
____
____
____
____ ____
6. Does the agency take a fresh look at the internal control system from
time to time and evaluate its effectiveness? If yes:
____
____
____
____
____
12
____
____
YES
7. Does the agency have an internal audit function? If yes, do the internal
auditors:
NO
____ ____
N/A
____
____
____ ____
____
e. Properly plan and supervise their work to ensure that the quality of
the workpapers meets applicable standards?
____ ____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
13
____
____
____
YES
NO
N/A
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
5. Does an independent person verify the cash receipts listing against the
deposit slips?
____
____
____
____
____
____
____
____
____
8. Is the bank deposit made by someone other than the cashier or the
accounts receivable accountant?
____
____
____
Cash Receipts
14
CASH MANAGEMENT
YES
NO
N/A
9. Do cash sales occur for other than fare revenues (e.g., monthly passes,
etc.)? If yes:
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
11. Are banks instructed not to cash checks that are drawn to the order of
the agency?
____
____
____
12. Is the cashier restricted from gaining access to the accounts receivable
records and bank and customer statements?
____
____
____
13. Does the agency have multiple funding sources that are used to fund
its operations and capital projects? If yes:
____
____
____
____
____
____
____
____
14. Are there formal (written) procedures in place to ensure that ECHO
(Electronic Clearinghouse Operations) requests for FTA grant funds
are made in a way that does not violate federal policy (i.e., the threeday rule)?
____
____
____
____
____
____
15
CASH MANAGEMENT
YES
NO
N/A
16. Is the responsibility for making ECHO requests segregated from the
responsibility for approving requests and reconciliations (both bank
account and grant reconciliations)?
____
____
____
17. Is the ECHO log reconciled regularly to cash receipts reflected on the
monthly bank statements by a person independent of the cash receipts
and accounts receivable functions?
____
____
____
____
____
____
19. Are there formal (written) procedures in place to ensure that no more
than the allowable federal portion is drawn down?
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
23. Are postings to the general ledger made by a person independent of the
cash receipts and accounts receivable functions?
____
____
____
____
____
____
____
____
____
16
CASH MANAGEMENT
YES
NO
N/A
____
____
____
____
____
____
____
____
____
4. Are there formal (written) procedures for processing and counting cash
once collected from the fareboxes?
____
____
____
Fare Revenues
____
____
____
ii. Are the areas where physical handling of cash takes place (e.g.,
the "money room") reasonably safeguarded?
____
____
____
____
____
____
ii. Has the agency reevaluated the controls at the external service
organization on a regular basis?
____
____
____
6. Are the results of the cash counts reconciled daily to the farebox
reports by a person independent of the cash receipts and cash counting
functions?
____
____
____
____
____
____
____
____
____
b. Externally:
17
CASH MANAGEMENT
YES
NO
N/A
1. Are all cash disbursements made by check except those made from
petty cash?
____
____
____
2. Are pre-numbered checks used and all check numbers accounted for?
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
a. At all times, are the keys, signature plate, and operation of the
signing machine under control of the official whose signature is on
the plate?
____
____
____
b. Are the employees who have custody of the keys and plate, and
who operate the check-signing machine, independent of checkpreparation functions and denied access to blank checks?
____
____
____
____
____
____
____
____
____
10. Do proper safeguards exist to prevent checks that have been mailed
from returning to the accounts payable accountant or to the employee
who drew the checks?
____
____
____
Cash Disbursements
18
CASH MANAGEMENT
YES
NO
N/A
____
____
____
____
____
____
13. Are all checks promptly recorded upon issuance and listed in detail
(e.g., in a check register)?
____
____
____
14. Are payroll checks drawn against a separate payroll bank account?
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
2. Does the agency have procedures in place to ensure that funds held in
excess of FDIC limits are collateralized and protected?
____
____
____
19
CASH MANAGEMENT
YES
NO
N/A
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
20
FIXED ASSETS
YES
NO
N/A
____
____
____
2. Are the methods for selecting useful lives and depreciation policy
clearly defined and approved by designated personnel?
____
____
____
3. Are there controls in place to ensure that only appropriate charges are
capitalized as fixed assets?
____
____
____
____
____
____
a. Asset description?
____
____
____
b. Identification number?
____
____
____
c. Cost?
____
____
____
d. Acquisition date?
____
____
____
e. Depreciation method?
____
____
____
f. Related depreciation?
____
____
____
g. Useful life?
____
____
____
____
____
____
____
____
____
j. Location?
____
____
____
____
____
____
____
____
____
____
____
____
Recording
21
FIXED ASSETS
YES
NO
N/A
____
____
____
b. Major renovations?
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
4. Does the fixed assets inventory process ensure that the current
condition of assets is noted and updated in the fixed assets records?
____
____
____
____
____
____
____
____
____
____
____
____
2. Does the retirement or sale of property require the review and approval
of designated personnel?
____
____
____
____
____
____
____
____
____
22
FIXED ASSETS
YES
NO
N/A
5. Are there controls in place to ensure that FTA receives its share of any
proceeds upon disposal of grant-funded assets, if required?
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
2. Does the agency have controls in place to ensure that fixed assets
preventive maintenance schedules are adhered to?
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
3. Are receiving reports for all incoming parts and materials prepared for
the accounting/finance department matched with purchase orders and
invoices?
____
____
____
Spare Parts
23
FIXED ASSETS
YES
NO
N/A
____
____
____
a. Quantities?
____
____
____
b. Unit costs?
____
____
____
____
____
____
6. Are the perpetual records kept by employees who have no access to the
spare parts inventory?
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
8. Are full inventories of spare parts taken at the end of the fiscal year?
____
____
____
____
____
____
____
____
____
____
____
____
12. Are written instructions and procedures followed for inventory counts,
and is compliance with them checked?
____
____
____
____
____
____
24
FIXED ASSETS
YES
NO
N/A
a. Quantities?
____
____
____
b. Unit cost?
____
____
____
____
____
____
15. Are costs, extensions, and footings of the inventory listings verified by
a second person?
____
____
____
____
____
____
PROCUREMENT
YES
NO
N/A
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
14. Are priced inventory sheets numerically controlled and verified as to:
Assessment of Need
1. Does the agency have a written Procurement Manual? If yes:
a. Does it conform to FTA's procurement regulations?
2. Does the agency have a procurement department? If yes:
25
PROCUREMENT
YES
NO
N/A
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
Procurement Structure
1. Regarding the type of procurement arrangement to be structured (i.e.,
small purchase, sealed bid, competitive proposal--either fixed price or
cost-reimbursement, non-competitive/sole source):
4. Are items purchased only after competitive bids are obtained? If yes,
are competitive bids obtained for:
____
____
____
____
____
____
____
____
____
a. Description of items?
____
____
____
b. Quantity?
____
____
____
c. Price?
____
____
____
d. Terms?
____
____
____
____
____
____
5. Are purchase orders sent to vendors for all purchases, specific types of
purchases, or purchases over predetermined dollar limits?
6. Do purchase orders specify:
26
PROCUREMENT
YES
NO
N/A
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
1. Are there formal (written) selection procedures used for each type of
procurement, including procedures for evaluating the technical aspects
of a procurement?
____
____
____
____
____
____
____
____
____
____
____
____
Vendor Qualification
1. Does the agency maintain an approved vendors list? If yes:
Vendor Selection
Civil Rights
1. Do the agency's procurement procedures ensure that minority firms
and women-owned business enterprises are used whenever possible?
27
PROCUREMENT
YES
NO
N/A
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
Contract Modifications
Dispute Resolution
Conflicts of Interest
1. Does the agency have written standards of conduct in place that define
real or perceived conflicts of interest relative to the performance of the
agency's representatives involved in the award or administration of
contracts? If yes:
28
ACCOUNTS PAYABLE
YES
NO
N/A
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
b. Pre-numbered?
____
____
____
a. Description?
____
____
____
b. Quantities?
____
____
____
c. Condition?
____
____
____
d. Price?
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
8. Are procedures in place for the proper accounting for partial deliveries
of purchase orders?
____
____
____
5. At the time that goods and/or services are received, and before
acceptance, does someone independent of the procurement department
check the terms of the purchase order as to:
29
ACCOUNTS PAYABLE
YES
NO
N/A
____
____
____
10. Are vendors invoices, receiving reports, and purchase orders matched
(i.e., three-way match) before invoices are processed?
____
____
____
____
____
____
12. Are all vendors instructed to mail their invoices to the same
name/department and address?
____
____
____
a. Prices?
____
____
____
____
____
____
____
____
____
d. Credit terms?
____
____
____
14. Are controls in place to ensure that all available vendor discounts are
taken?
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
30
ACCOUNTS PAYABLE
YES
NO
N/A
____
____
____
20. Are there procedures in place to avoid the risk that a project manager
or department head could misplace an invoice before approving it and
submitting it to accounts payable?
____
____
____
21. Are open (i.e., unmatched) receiving reports, purchase orders, and
vendors invoices periodically reviewed and investigated for proper
recording?
____
____
____
____
____
____
23. Are statements from vendors regularly reviewed and reconciled against
recorded liabilities?
____
____
____
____
____
____
PAYROLL
YES
NO
N/A
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
31
PAYROLL
YES
NO
N/A
____
____
____
____
____
a. Approved in advance?
____
____
____
____
____
____
10. Are sick leave, vacations, and holidays reviewed for compliance with
agency policy?
____
____
____
11. Are appropriate forms (e.g., W-4) completed and signed by employees
to authorize payroll deductions and withholding exemptions?
____
____
____
12. Are the payroll accounting records periodically checked against the
personnel records for terminated employees, fictitious employees, etc.? ____
____
____
13. Does the agency use a time clock and/or timesheets to capture payroll
hours for:
a. General office workers?
____
____
____
b. Operations/maintenance workers?
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
15. If the agency uses time sheets for certain employees, are time sheets:
16. Are time cards and time sheets reviewed and compared with:
32
PAYROLL
YES
NO
N/A
____
____
____
____
____
____
a. Names of employees?
____
____
____
b. Hours worked?
____
____
____
c. Wage rates?
____
____
____
d. Deductions?
____
____
____
____
____
____
f. Unusual items?
____
____
____
____
____
____
____
____
____
____
____
____
b. Signature plate?
____
____
____
____
____
____
____
____
____
____
____
____
sheets?
____
____
____
____
____
____
approved for:
21. Are checks drawn and signed by designated officials who do not:
33
PAYROLL
YES
NO
N/A
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
27. Is a liability account set up for all wages that have remained unclaimed
for a certain period of time? If yes:
____
____
____
26. Are the payroll registers reconciled regularly to the general ledger
control accounts?
____
____
____
____
____
____
____
____
____
____
____
____
30. Are detailed records maintained of the agencys liability for vacation
pay and sick pay? If yes:
____
____
____
____
____
____
____
____
____
34
PAYROLL
YES
NO
N/A
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
YES
NO
N/A
1. Does the agency have an indirect Cost Allocation Plan (CAP) that has
been approved by FTA, or other cognizant federal agency, if
applicable? If yes:
____
____
____
____
____
____
____
____
____
OVERHEAD
Cost Allocation Plan
35
OVERHEAD
YES
NO
N/A
____
____
____
d. Are there controls in place to ensure that the CAP rates are
correctly applied to the appropriate costs?
____
____
____
____
____
____
____
____
Indirect Costs
1. Are there procedures in place for charging other indirect costs to
capital projects, such as percentages of certain overhead support
functions (e.g., legal, IT/EDP, etc.)?
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
2. Is there a review and authorization process whereby the direct costs are
identified, verified, approved, and charged to the project accounting
system?
____
____
____
Direct Costs
1. Are there procedures in place for charging certain direct costs (e.g.,
supplies, construction equipment, etc.) to capital projects?
36
OVERHEAD
YES
NO
N/A
____
____
____
____
____
____
____
____
____
d. Properly authorized?
____
____
____
YES
NO
N/A
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
BUDGET CONTROLS
Operating Budget
1. Does the agency have detailed formal (written) procedures for
formulating the annual operating budget? If yes:
a. Are these procedures current and accessible to all staff involved in
the budget formulation process?
37
BUDGET CONTROLS
YES
NO
N/A
____
____
____
____
____
____
____
____
____
1. Are there procedures in place for planning capital projects and for
obtaining grant funding?
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
Capital Budget
1. Does the agency have detailed written procedures for formulating the
annual capital budget? If yes:
38
BUDGET CONTROLS
YES
NO
N/A
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
YES
NO
N/A
____
____
____
____
____
____
____
____
____
____
____
____
GRANTS MANAGEMENT
Grant Records
1. Does the agency use a separate grants management system (i.e., apart
from the agency's main financial management/general ledger system)
to track grant activity? If yes:
39
GRANTS MANAGEMENT
YES
NO
N/A
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
3. Once incurred, does the agency have procedures in place to ensure that
only approved and allowable costs have been charged to grants?
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
Encumbrances
1. Does the agency track major encumbrances of grant balances for
project expenses? If yes:
40
GRANTS MANAGEMENT
YES
NO
N/A
____
____
____
d. Does the grants management system (or other system that tracks
encumbrances) interface with the procurement system?
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
Grant Reporting
Budget Revisions
1. Are there formal (written) procedures in place to ensure that grant
budget revisions are made only when properly authorized and
justified? Specifically:
41
GRANTS MANAGEMENT
YES
NO
N/A
2. Are there procedures in place to ensure that grant budget revisions are
communicated to FTA in a timely manner, and approved by FTA, if
required?
____
____
____
1. Does the agency have formal (written) policies and procedures in place
for closing out grants?
____
____
____
Grant Close-Out
____
____
____
b. Ensure that grants are closed out and final FSRs are submitted on a
timely basis?
____
____
____
c. Ensure that inactive grants with unspent balances are not carried
forward beyond when close-out should occur (i.e., when all
approved grant project activities are complete)?
____
____
____
d. Ensure that inactive grants with excess balances are not being used
for other projects without the advance approval of FTA?
____
____
____
YES
NO
N/A
____
____
____
____
____
____
____
____
____
____
____
____
PROJECT MANAGEMENT
Project Accounting
1. Does the agency use a separate project management/tracking system
(i.e., apart from the main financial management/general ledger system)
to track progress of construction capital projects? If yes:
42
PROJECT MANAGEMENT
YES
NO
N/A
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
5. Are project status reports prepared and reviewed regularly with project
managers and senior management?
____
____
____
____
____
____
____
____
____
____
____
____
____
____
10. If a contract change order results in the need for a grant budget
revision, is there a documented process for preparation, review, and
approval of the budget revision request, prior to submission to FTA?
____
____
____
Project Management
43
IT CONTROLS
YES
____ ____
____
____
____
____
____
____
____
4. Are computer operators required to take annual vacations and are their
duties rotated periodically?
____
____
____
____ ____
____
____ ____
____
____
____
9. Are utility programs adequately controlled and their use logged for
subsequent management review?
____
____
____
____
____
____
____ ____
____
12. Are there restrictions on the length and type of password that can be
chosen?
____ ____
____
13. Do individuals have access only to those programs or files that are
necessary to perform their duties?
____ ____
____
14. Are there procedures in place for documenting new systems and
programs, as well as documenting modifications of existing ones?
____
____
44
____
NO
____
____
____
N/A
____
IT CONTROLS
YES
NO
N/A
application?
____ ____
____
____
____
____
and are test results reviewed and approved by user department and IT
management?
____
____
____
applications?
____
____ ____
____
____
____
____ ____
____
____
____
____
____
____
____
____
____
____
b. System failures?
____ ____
____
____
____
d. Emergency situations?
____
____
____
____
____
____
18. Are adequate job set-up and execution procedures in place over:
19. Are there procedures in place for identifying, reporting, and approving
____
21. Are the agencys application programs compatible with each other?
____
____ ____
45
____ ____
____
IT CONTROLS
YES
NO
N/A
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____ ____
____
____
____
____
____ ____
____
____ ____
____
____
____
____
24. Are there appropriate procedures for backup and storage of programs
and data files?
____
____
____
25. Are critical data files, systems, and program libraries backed up
regularly and stored off-site?
____ ____
____
____
____
46
____
IT CONTROLS
YES
NO
N/A
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
____
28. Is there a written security plan that describes the agency's IT security
program, as well as the policies and procedures that support it?
____
____
29. Does the agency have an IT security awareness program, the purpose
of which is to inform all users of the established IT security policies?
____
____ ____
47
____