Office of County Internal Audit Charter

Mission

Enhance and protect the county’s ability to serve the public by providing risk-based and objective assurance, advice, and insight.

Vision

The Office of County Internal Audit’s (Office’s) assurance, advisory, and investigative services:

enhance the confidence of Clackamas County residents, employees and departments that the public’s interests are protected
encourage engagement with an accountable, high performing, and transparent local government

Purpose

Through independent and objective assurance, advisory and investigative services, the Office strengthens the county’s ability to serve the public.

The Office uses a systematic, disciplined approach to evaluate the county’s governance, risk management, and control processes, by assessing:

Efficient and effective use of public resources
Financial and operational reporting
Information and asset security
Compliance with laws, regulations, policies and ethics

Authority

The Office is established in County Code Chapter 2.15: County Internal Auditor.

The Office is authorized to examine and evaluate the operations and activities of any office, department, political subdivision, or organization which receives appropriations from the Board of County Commissioners, or for which governing bodies are, or are appointed by, the Board of County Commissioners.

The Office is granted full, free and unrestricted timely access to all activities, information, records, property and personnel required to provide assurance, advisory or investigative services. The Office has the authority to request reasonable assistance from county personnel in acquiring records, documents and files, as well as inspection and entry privileges to all assets owned, leased or borrowed by the County. Office internal auditors are held strictly accountable for the safeguard of all materials and the confidentiality of information, when appropriate.

Professionalism

The Office governs itself by adherence to The Institute of Internal Auditors’ Global Internal Audit Standards (Standards). The Standards constitute principles of the fundamental requirements for the professional practice of internal auditing and for evaluating the effectiveness of the Office’s performance. The County Internal Auditor annually affirms to the Oversight Committee compliance with the Global Internal Audit Standards.

Independence and Objectivity

The County Internal Auditor is the Chief Audit Executive. The County Internal Auditor reports functionally to the Internal Audit Oversight Committee (Oversight Committee) and administratively to the Internal Audit Administrator.

Functional oversight responsibilities of the Oversight Committee include ensuring the independence of the Office, approving the risk-based audit plan, reviewing audit reports and recommendations, and providing input regarding the appointment or removal of the County Internal Auditor.
Administrative responsibilities of the Internal Audit Administrator include facilitating Office budgetary processes and administering personnel activities supporting the County Internal Auditor position, including the appointment and removal of the County Internal Auditor with input from the Oversight Committee.

The Office remains free from conditions that may impair the ability of the Office to carry out internal audit responsibilities in an unbiased manner, including matters of engagement selection, scope, procedures, frequency, timing and communication form or content.

The Office does not perform, or have authority over, operational responsibilities or non-audit functions or duties subject to periodic internal audit assessments, as this may compromise its independence or objectivity.

Office internal auditors exhibit the highest level of professional objectivity in gathering, evaluating and communicating information about the activity or process being assessed. Office internal auditors make a balanced assessment of all the relevant circumstances and are not unduly influenced by their own interests or by others in forming judgments. Office internal auditors have impartial, unbiased attitudes and avoid any conflicts of interest. Any potential impairment or conflict of interest will be documented within audit files and disclosed to the Oversight Committee.

The County Internal Auditor annually affirms to the Oversight Committee the organizational independence of the internal audit function and the professional objectivity of the internal auditors.

Scope of Work and Responsibilities

The scope of internal auditing encompasses, but is not limited to, the examination and evaluation of the adequacy and effectiveness of the county’s governance, risk management and control process, as well as the quality of performance in carrying out assigned responsibilities to achieve its goals and objectives. The Office provides three types of services – assurance, advisory and investigative.

Assurance services are services through which internal auditors perform objective assessments and provide assurance statements. These statements are intended to increase the level of stakeholders’ confidence about the county’s governance, risk management, and control processes over an issue, condition, subject matter, or activity under review when compared to established criteria. Examples of assurance services include compliance, financial, operational or performance, and technology engagements. The Office may provide limited or reasonable assurance, depending on the nature, timing, and extent of procedures performed.

Advisory services are consultative and include service activities such as counsel, advice, facilitation, training and participation in standing or temporary management committees or project teams. The objective of advisory services is to add value in the development, modification or validation of county processes, procedures and controls to minimize risk, achieve objectives and foster continuous improvement. Advisory services do not provide assurance or assume management responsibilities.

Investigative services are independent special reviews and investigations addressing allegations of fraud, waste, abuse, or misuse of county assets and resources. The Office develops, implements, and manages the county fraud, waste, and abuse hotline program.

Quality Assurance and Improvement Program

The Office maintains a quality assurance and improvement program. The program is an evaluation tool that ensures the internal audit function conforms with the Global Internal Audit Standards, achieves performance objectives, and pursues continuous improvement. The County Internal Auditor reviews program results with the Oversight Committee at least annually.

The County Internal Auditor reviews and assesses the adequacy of this charter with the Oversight Committee at least annually. Revisions are submitted to the Oversight Committee for approval. All approved revisions supersede prior Office of County Internal Audit charters.

County Management Responsibilities

County management is responsible for the county’s governance, risk management, and control processes. The performance of assurance, advisory and investigative services by the Office does not relieve management of any responsibilities.

Approved as revised this 5TH day of August 2026 by Internal Audit Oversight Committee vote, and in collaboration with the Internal Audit Administrator and the County Internal Auditor.