Agenda Item
a. Gartner, Inc. - Approval of Professional Services Agreement (Not to exceed $96,900) ~ Updated 8.12.2024
Summary: Presented by: Mr. Joel B. Thibodeaux, CIA, Director of Internal Audits & Compliance, Chief of Staff Division, 678-676-0740
Request: It is requested that the DeKalb Board of Education authorize the District to engage Gartner, Inc. utilizing the Georgia statewide contract (#99999-SPD-SPD0000208-0014) for the provision of flat-fee, subscription based advisory and consulting services to the Office of Internal Audits & Compliance for an amount not to exceed $96,900.
Why: Gartner, Inc. provides subscription based access to an extensive library of research, professional standards, regulatory documents, and industry performance data. Additionally, consultants are also available to advise and assist with the necessary research and development for internally managed upgrades and improvements to the operational and administrative processes in Internal Audits for the purpose of ensuring that our work meets or exceeds industry standards.
Details: Our critical priority is to modernize and mature DCSD's Internal Audit function to become more forward-looking and best in class.
Financial impact: $96,600 from the FY2025 Internal Audits & Compliance departmental budget (Loc. 7230).
100-530000-00011-7230-9990-8010-010-0000
Contact: Mr. Joel B. Thibodeaux, CIA, Director of Internal Audits & Compliance, Chief of Staff Division, 678-676-0740
Effective: September 1, 2023 - following Board approval and execution of the service agreement.
Status: Approved by Legal Affairs
Gartner for Audit Leaders
© 2021 Gartner, Inc. and/or its affiliates. All rights reserved. Gartner is a registered trademark of Gartner, Inc. and its affiliates. This presentation, including all supporting materials,
is proprietary to Gartner, Inc. and/or its affiliates and is for the sole internal use of the intended recipients. Because this presentation may contain information that is confidential,
proprietary or otherwise legally protected, it may not be further copied, distributed or publicly displayed without the express written permission of Gartner, Inc. or its affiliates.
Executive summary
Audit High
• Grow audit team while equipping staff with the skills necessary to meet Evolve talent management strategy Improve audit department efficiency
the demands of a modern & best-in-class audit shop.
• Improve audit department efficiency to better manage increasing
demands with limited staff. Evolve the Audit Risk Assessment Process
• position audit as a strategic partner across the organization.
Increase Audit Data & Analytics
• Increasing the value of the audit department on strategic and
transformation projects.
Develop & present business case for ERM
• Develop sustainable data analytics strategy to increase the use of D&A
IMPACT
in audit methodology. Develop ERM framework and governance
• Improve audit risk reporting to create more meaningful and actionable
advice. Coordinating Risk Efforts Improve Audit Reporting
• Evolve the audit risk assessment process to better understand risk
within DCSD. Improve support on transformation projects
ERM
• Present business case for ERM and gain buy-in from stakeholders.
• Develop best-in-class enterprise risk management framework and risk
governance model.
• Align assurance efforts across DCSD.
URGENCY High
RESTRICTED DISTRIBUTION
2 © 2022 Gartner, Inc. and/or its affiliates. All rights reserved.
DCSD/Gartner – Quick Wins
Client Initiatives Step 1 Step 2 Step 3 Value Connects
• Interpret the Score results report
• Diagnose the current state of your with a walk-through and action-
audit shop utilizing Gartner’s Audit planning guidance for developing the • Team Service Kick-Off for Director of
• Refine competency framework to
Score (functional maturity department strategy from a Gartner Audits and identified License Holders.
Audit guide auditor development and
Department diagnostic). audit advisor. strengthen performance with • Monthly Check-in with Client Partner
Support • Inform long-term talent plans and • Develop a meaningful strategic plan Toolkit: Auditor Competency and Account Executive.
close capability gaps utilizing Audit leveraging Gartner’s advisory team Framework and Guidebook.
• Support from Gartner Advisory.
Skills Diagnostic. and ignition guide to strategic
planning.
• Develop an audit data analytics
strategy through Gartner’s research:
Structuring a Data Analytics Program • Evolve audit risk assessment • Monthly Check-in with Client Partner
• Benchmark the audit department’s
Audit leveraging benchmarking data. process utilizing Gartner’s and Account Executive.
current data analytics performance
Department Provocative Risk Assessment
with Data & Analytics Score Maturity • Improve the effectiveness of audit • Support from Gartner Advisory.
Support research aligned to DCSD through
Assessment reporting through Gartner’s research Gartner SME engagement
on Improving Audit reporting and
SME engagement.
• Build and Present the business case
for ERM leveraging Gartner’s board-
• Develop ERM roadmap and ready presentation ERM
Enterprise Risk framework utilizing Gartner’s Foundations. • Collaborate with a Gartner expert • Monthly executive coaching with
Management Ignition Guide to launching an ERM to identify opportunities to efficiently Executive Advisor team.
• Develop strategy for risk coordination
Support function. Leveraging SME across legal, compliance, audit, risk mature ERM with best practices. • Support from Gartner Advisory.
engagement to right size to DCSD. utilizing Gartner’s research Risk
Coordination and Dynamic Risk
Governance.
RESTRICTED DISTRIBUTION
3 © 2022 Gartner, Inc. and/or its affiliates. All rights reserved.
Team Structure – Start Date 9/01 Gartner Support
Aligned to Account Executive, Client
Partner, Advisory Support, research &
data insights, events and tools to
Team Lead support key initiatives.
Able to direct the deployment of
Director of Audits diagnostic and involve other Gartner-
supported team members.
Aligned to Account Executive, Client
Partner, Advisory Support, research &
Advisor
data insights, events and tools to
Risk & Control support key initiatives.
IA Lead IT Auditor
Resources Audit Staff
R&C Self-service tools and templates, CPE
Resources training for front-line internal auditors
Details of Continued Partnership
Seats Contract Start Date Contract End Date Total – 3 Seats
Gartner for Assurance Leaders 9/1/2024 8/31/2025 Year 1: $96,900
• 1 x Team Leader Seat
• 2 x Advisor Seats
• 50 x R&C Resources Seats
RESTRICTED DISTRIBUTION
4 © 2022 Gartner, Inc. and/or its affiliates. All rights reserved.
Appendix
RESTRICTED DISTRIBUTION
5 © 2022 Gartner, Inc. and/or its affiliates. All rights reserved.
Leveraging Gartner
Unlimited access to insight, advice, and tools
Gartner Account
Team
MyGartner Portal Analyst Inquiry Peer Network & Events
• Management research and • Subject-matter expertise • Virtual Peer Forum
best practices • Practitioner perspective • Live and on-demand webinars
• Benchmarks and • Strategic adviser and sounding • Exclusive, executive-only peer
diagnostics board events and networking
opportunities
• Toolkits and guides • Unlimited 1:1 interactions
• Consumer & buyer insights • On-call, personalized guidance
• Objective technology • Agency, technology, contract
research and insights decision and review support
RESTRICTED DISTRIBUTION
6 © 2022 Gartner, Inc. and/or its affiliates. All rights reserved.
RESTRICTED DISTRIBUTION
7 © 2022 Gartner, Inc. and/or its affiliates. All rights reserved.
RESTRICTED DISTRIBUTION
8 © 2022 Gartner, Inc. and/or its affiliates. All rights reserved.
Diagnostics and benchmarks:
Risk Management Score
Assess your function’s performance
On-demand diagnostic that measures enterprise risk
management performance across 4 functional objectives
and 16 discrete functional activities. Primary use cases
include:
Strategic mapping – Gain insight on how well
your function is performing in its current state
Innovation planning – Apply expert guidance to
your short-term and long-term plans with the tools
and resources needed to enable stronger
performance in today’s risk environment
Resource guidance – Ensure alignment of
strategy and resources with market opportunities
and business needs
RESTRICTED DISTRIBUTION
9 © 2023 Gartner, Inc. and/or its affiliates. All rights reserved.
Risk & Control Resources for Internal Auditors
Formerly known as Audit Reference Center, this self-service resource center helps you and your team build
business and process knowledge while saving time on projects.
Risk & Control Resources
Access our extensive resource center supporting internal auditors to
quickly engage management across the range of risk areas they are
being asked to assure. Our research and tools are designed to reduce
cycle time, heighten control identification and drive better risk
identification.
All-in-One Center – Leverage risk education materials, corporate
best practices and audit support on commonly audited areas and
new emerging risk areas
Time-Saving Tools – Use internal controls questionnaires, KRI
libraries, and example audit programs to scope and kick-start audit
projects
Risk Education – Stay up-to-date on the latest risk trends and
strengthen risk identification and assessment
Webinars and on-demand courses to help key audit staff members expand
business and process knowledge and maintain their CPE certification.
RESTRICTED DISTRIBUTION
10 © 2022 Gartner, Inc. and/or its affiliates. All rights reserved.
Risk & Control Resources for Internal Auditors
Access time-saving tools to build process, control and fraud knowledge.
Audit Program Exchange Data Privacy and Governance Library Internal Control Questionnaire Builder Tools
Audit Programs Sourced and Shared Internal control questions covering revenue, expenditure,
by the World’s Leading Audit Teams HR, IT, supply chain, third parties and treasury
Third-Party Management: Contract Review
1. Does the company have a set policy or manual for
authorizing contracts?
2. Does the company policy provide written procedures to
guide business managers through the contract
Fraud Risk Database process?
Collection of fraud schemes to support fraud identification, prevention and detection 3. Does management monitor training to ensure all
Man in the Middle Cyber Attack: Fraudster impersonate an entity familiar to an employee to gain relevant personnel are educated on proper policies?
Fraud Scheme access to credentials of inject malicious software
4. To prevent unauthorized payments, are contracts
The sender’s address isn’t correct; Information does not necessarily concern the receiver directly; drawn up and signed prior to the procurement of third-
Red Flag Symptom Email is sent by the name of influential people for e.g. company’s CEO
party goods or services?
Detection Steps
Verify that the person requesting this information is who they say they are; Check the authenticity
of the website before providing any personal information
5. To prevent unauthorized contracts, does the proper
authority (board of directors, CEO, CFO, head of
business unit, procurement manager, etc.) provide
Guide employees not to open any unexpected attachments; Regularly update the operating system
Controls to Review with the latest security patches; Limit user access privileges; Encourage employees to protect written authorization of the contract?
home systems
RESTRICTED DISTRIBUTION
11 © 2022 Gartner, Inc. and/or its affiliates. All rights reserved.
Gartner is a Continuous Self-Funding Model
Cost Avoidance Budget/Staff Justification
Understand what other organizations, like yours, are spending or what you
Leverage talent resources to avoid external developmental and creation costs
should plan for resources for individual projects
ERM/Audit Technology Investments Maturity Assessments
Expert Gartner technology advice, Magic Quadrants, Critical Capabilities, and Market
Guides to help you select and secure value from your technology investments Immediately understand Legal process maturity and improvement steps
Time is Money Benchmarking/Key Metrics
Average decisions in organizations take 8‒9 months,
Save costs by understanding the best in class metrics; know what your
Gartner reduces that decision time frame by 30%‒60% assurance spend should look like as a percentage of operational budget
Extension of Your Staff Decision Confidence
How much would it cost to staff 100+ Assurance subject matter experts?
Use one trusted, unbiased source for all your due diligence — lead with
Frameworks, tools, templates, best practice research, dedicated advisors extend staff
confidence
& save time
RESTRICTED DISTRIBUTION
12 © 2022 Gartner, Inc. and/or its affiliates. All rights reserved.