The summary of what the audit found is that while the finance department does have policies and procedures, enforcement, accountability, and oversight is lacking.
Is this discovery alarming? Yes. Is this bad news? Yes. And yet the auditor’s discovery of the internal controls issues is also good news!