
PORT COMMISSION AUDIT COMMITTEE MEETING MINUTES Page 3 of 4
FRIDAY, SEPTEMBER 28, 2018
Operational Audit – Cash Control – Sea-Tac Parking Garage:
The Committee received a presentation from Mr. Fernandes that included the following information:
The purpose of this audit was to examine cash handling procedures at the Sea-Tac Parking
Garage in order to evaluate the efficiency and effectiveness of internal controls.
It was determined that controls could be strengthened by enhancing access to the cash counting
room, and by reducing the amount of the change fund.
Operational Audit – Interim West Side Fire Station:
In lieu of a presentation, it was suggested that this item be postponed to allow more time for a management
response, to consider pausing the project, and to examine alternatives.
A motion was adopted to refer the audit to the full commission to consider additional options.
[Clerk’s Note: After gathering more information, Commissioners Felleman and Steinbrueck opted not to
recommend changes to the project as planned when they reported on this audit at the October 9, 2018,
regular commission meeting.]
Information Technology – T2 ParkingSoft System:
The Committee received a presentation from Mr. Hansen and Mr. Larsen that included the following
information:
This system replaces the previous system, which was not sufficient to meet business needs, and
was implemented in summer 2018.
This review examined processes and procedures for maintaining this system.
Results of the audit showed that the stability and security of parking procedures have increased.
While implementation is still in progress, there were four medium findings:
o Monitoring of individual devices is limited. It is recommended that monitoring be put in place to
produce an alert for problems with single devices.
o Policies and procedures should be put in place to monitor vendor responsibilities.
o Physical access to assets should be improved. A server room should be dedicated to hosting
the system, or additional safeguards such as cameras or server cages should be implemented.
o Firewalls should be configured more stridently, with regular evaluation and maintenance of
rules.
Management has made changes to address single-device monitoring, firewall configuration, and
vendor responsibilities. Regarding server access, they noted that the appropriate personnel have
access to the server room. While it is true that part of the space is used for other purposes (device
repair), those tasks are performed by the same personnel who perform work on the servers and
are vetted to have access.
Limited Contract Compliance Audit – Fox Rent-A-Car Inc.:
The Committee received a presentation from Mr. Fernandes that included the following information:
This audit found approximately $52,000 were owed in percentage fees, and $10,000 were owed on
customer facility charge fees.