City and County of Denver

201 West Colfax Avenue, #705 _• Denver, Colorado 80202

720-913-5000 _• Fax 720-913-5253 _• www.denvergov.org/auditor

December 15, 2016

AUDITOR’S REPORT

We have completed a Citywide audit of personally identifiable information management. The purpose of the audit was to examine the effectiveness of the City’s internal controls in place to safeguard personally identifiable information, or PII.

As described in the attached report,

 Our report lists several related recommendations that,if implemented,will establish a robust  framework for PII management based on widely accepted principles and practices.

This performance audit is authorized pursuant to the City and County of Denver Charter, Article V, Part 2, Section 1, General Powers and Duties of Auditor, and was conducted in accordance with generally accepted government auditing standards. Those standards require that we plan and perform the audit to obtain sufficient, appropriate evidence to provide a reasonable basis for our findings and conclusions based on our audit objectives. We believe that the evidence obtained provides a reasonable basis for our findings and conclusions based on our audit objectives.

We extend appreciation to the Mayor’s Office and the personnel who assisted and cooperated with us during the audit.

Denver Auditor’s Office

Timothy M.O’Brien,CPA Auditor

READ FULL REPORT HERE

http://www.denverinc.org/wp-content/uploads/2016/12/PersonallyIdentifiableInformation_December2016.pdf