What Should TUSD's Objectives Be?

COSO divides objectives into three broad categories:

Operations — Reporting — Compliance

For TUSD, I would establish 12 enterprise-level objectives beneath those categories.

The key principle is:

Objective → Risk → Control → Evidence → Monitoring

If TUSD cannot clearly state the objective, it becomes very difficult for Internal Audit to determine whether management has identified the right risks or designed the right controls.

I. OPERATIONS OBJECTIVES

Objective 1 — Student Academic Achievement

Objective: Improve measurable student academic achievement and educational outcomes across TUSD schools and student populations.

This should be the district's primary operational objective.

TUSD's strategic plan already identifies academic growth under Future-Focused Learning, and increasing student academic achievement is one of the Governing Board's approved superintendent goals.

Risks

What could prevent TUSD from achieving this objective?

• Poor instructional quality

• Chronic absenteeism

• Teacher vacancies

• Inadequate intervention programs

• Weak curriculum implementation

• Ineffective use of educational resources

• Achievement gaps

• Inadequate performance monitoring

• Programs that consume resources without producing measurable outcomes

Key Controls

TUSD should have controls over:

• Student-performance measurement

• School-level performance monitoring

• Intervention programs

• Curriculum implementation

• Teacher performance and development

• Program effectiveness

• Corrective-action plans for underperforming schools

Maturity Measures

• A Level 1 organization primarily reacts to poor test results.

• A Level 3 organization has documented performance targets, assigns accountability and regularly measures outcomes.

• A Level 5 organization continuously analyzes student-level and school-level data and reallocates resources based upon demonstrated educational outcomes.

Objective 2 — Enrollment and Student Retention

Objective: Sustain and increase student enrollment by attracting and retaining students and families.

This is particularly important because TUSD itself identifies sustaining and increasing enrollment under its Optimized Resources goal, while the Governing Board separately identifies increased enrollment as a superintendent goal.

Enrollment is not merely a marketing metric.

It is an operational and financial risk driver.

Risks

• Continued enrollment decline

• Competition from charter schools

• Competition from neighboring districts

• Demographic changes

• Family dissatisfaction

• Poor academic performance

• School climate problems

• Inaccurate enrollment forecasting

• Excess facilities capacity

• Budget assumptions based upon unrealistic enrollment

Key Controls

• Enrollment forecasting

• Student withdrawal analysis

• School-level enrollment monitoring

• Parent satisfaction analysis

• Competitive analysis

• Enrollment-to-budget reconciliation

• Weighted Student Count monitoring

Important KPI

I would make this one of TUSD's highest-level governance indicators:

Actual Enrollment vs. Budgeted Enrollment

with monthly/periodic trend reporting and forward projections.

Objective 3 — Safe and Effective Schools

Objective: Provide students and employees with safe, secure and effective learning environments.

School climate and safety is already one of the Governing Board-approved superintendent goals.

Risks

• Student violence

• Bullying

• Weapons

• Inadequate emergency response

• Facility hazards

• Employee misconduct

• Cyber threats

• Inadequate access controls

• Poor school climate

• Inadequate incident reporting

Key Controls

Emergency plans, physical security, incident reporting, background checks, school climate surveys, threat assessments, cybersecurity controls, facility inspections and corrective-action monitoring.

Objective 4 — Qualified and Effective Workforce

Objective: Recruit, develop and retain sufficient qualified personnel to accomplish TUSD's educational and operational objectives.

TUSD specifically identifies recruitment and retention under Optimized Resources, and decreasing classrooms without certified teachers of record is a Governing Board-approved superintendent goal.

Risks

• Teacher shortages

• Excessive turnover

• Unfilled positions

• Inadequately qualified personnel

• Excess administrative staffing

• Poor succession planning

• Ineffective performance management

• Payroll and compensation problems

Key Controls

• Position authorization

• Background verification

• Credential verification

• Staffing ratios

• Vacancy reporting

• Turnover analysis

• Performance evaluations

• Succession planning

• Payroll controls

Objective 5 — Financial Sustainability

This should be one of TUSD's most important COSO objectives.

Objective: Maintain sufficient recurring revenues, liquidity, reserves and expenditure discipline to sustain district operations over both the short and long term.

TUSD's strategic plan already says budgets should be developed transparently and aligned with strategic goals, financial investments should be measured for effectiveness, and enrollment should be sustained and increased.

Risks

This objective creates an extensive risk universe:

• Enrollment decline

• Weighted Student Count decline

• Revenue forecasting errors

• Structural operating deficits

• Excess staffing

• Uncontrolled spending

• Inadequate reserves

• Cash-flow shortages

• Grant funding expiration

• Failure to adjust expenditures when revenues decline

• Poor long-term financial forecasting

Key Controls

I would expect:

• Five-year financial forecasts

• Monthly cash-flow forecasts

• Budget-to-actual reporting

• Enrollment/WSC sensitivity analysis

• Position-control systems

• Vacancy controls

• Reserve monitoring

• Scenario analysis

• Corrective-action thresholds

For example:

If WSC declines 5% instead of management's budgeted assumption, what happens to revenue, expenditures and liquidity?

That is a COSO risk assessment.

Objective 6 — Efficient Use of Public Resources

Objective: Use taxpayer and grant resources economically, efficiently and effectively to maximize resources reaching classroom instruction and student services.

This connects directly to the Governing Board goal of increasing classroom instructional spending consistent with Arizona Auditor General criteria.

Risks

• Administrative overhead

• Inefficient procurement

• Underutilized facilities

• Poor contract management

• Duplicate programs

• Programs without measurable outcomes

• Waste

• Fraud

• Poor staffing ratios

Controls

• Cost-per-student analysis

• Peer-district benchmarking

• Procurement controls

• Contract monitoring

• Program ROI analysis

• Staffing benchmarks

• Facilities-utilization analysis

• Vendor performance monitoring

This objective should force management to answer:

What educational or operational outcome did TUSD obtain for the money spent?

II. REPORTING OBJECTIVES

These objectives receive far too little attention in many governmental organizations.

Objective 7 — Reliable Financial Reporting

Objective: Produce complete, accurate, timely and transparent financial information for management, the Governing Board, Audit Committee, regulators and the public.

This objective should encompass:

• Annual financial statements

• Budget reports

• Cash reports

• Grant reports

• State reporting

• Governing Board financial reports

• Audit Committee reports

Risks

• Material financial errors

• Inaccurate budget information

• Incomplete disclosures

• Misclassification

• Late reporting

• Unsupported estimates

• Management override

• Poor reconciliations

Controls

• Account reconciliations

• Close procedures

• Supervisory reviews

• Journal-entry controls

• System access controls

• Financial-reporting checklists

• Variance analysis

• Independent review

Objective 8 — Transparent Budget Reporting

I would make this a separate COSO objective, not bury it inside financial reporting.

Objective: Provide the Governing Board, Audit Committee and public with sufficiently detailed, accurate and timely budget information to understand how public resources are planned, allocated and spent.

This directly supports TUSD's stated Integrity value. TUSD says integrity includes transparency, accountability, consistent practices, shared responsibility for district resources and specifically transparency in all financial matters.

Controls

• Comprehensive annual budget book

• Department-level budgets

• Program-level budgets

• Position budgets

• Revenue assumptions

• Enrollment/WSC assumptions

• Multi-year forecasts

• Budget-to-actual reporting

• Variance explanations

• Public disclosure controls

The maturity test is simple.

A low-maturity organization reports:

“The budget is $X million.”

A mature organization explains:

Where is the money coming from, where is it going, what assumptions support the budget, what changed, what risks could make the budget wrong, and what will management do if those risks materialize?

Objective 9 — Reliable Operational and Student Data

Objective: Ensure that material nonfinancial information used for educational, operational, regulatory and governance decisions is complete, accurate, timely and reliable.

This includes:

• Enrollment

• Attendance

• WSC

• Graduation

• Student achievement

• Teacher vacancies

• Classroom staffing

• Safety incidents

• Program outcomes

Management cannot effectively manage TUSD if the underlying data are unreliable.

III. COMPLIANCE OBJECTIVES

Objective 10 — Compliance With Laws, Regulations and Grant Requirements

Objective: Conduct district activities in compliance with applicable federal and Arizona laws, regulations, grant requirements, Governing Board policies and contractual obligations.

The risk universe includes:

• Arizona school-finance requirements

• Federal grants

• Uniform Guidance

• IDEA

• Title programs

• Procurement requirements

• Employment requirements

• Student privacy

• Civil rights

• Desegregation-related obligations

• Special education

• Records requirements

TUSD's desegregation materials, for example, emphasize public accountability for continuing programs and initiatives following the district's emergence from federal court supervision.

Controls

Compliance inventories, responsible owners, regulatory calendars, grant monitoring, legal review, training, compliance testing and corrective-action tracking.

Objective 11 — Fraud, Waste and Abuse Prevention

I would explicitly establish this as an enterprise objective.

Objective: Protect TUSD resources from fraud, waste, abuse, corruption, conflicts of interest and unauthorized use.

Risks

• Procurement fraud

• Payroll fraud

• Ghost employees

• Vendor fraud

• P-card abuse

• Grant fraud

• Asset theft

• Conflicts of interest

• Management override

• Cyber fraud

Controls

Hotline, conflict-of-interest disclosures, segregation of duties, vendor controls, purchasing controls, fraud-risk assessments, data analytics, investigations and independent Internal Audit.

This is where COSO Principle 8—Assess Fraud Risk—becomes extremely important.

Objective 12 — Effective Governance and Accountability

I would add one more objective because it cuts across everything above.

Objective: Maintain governance, management accountability and independent assurance sufficient to oversee achievement of district objectives and timely correction of significant deficiencies.

Controls would include:

• Governing Board oversight

• Audit Committee oversight

• Internal Audit independence

• Management performance measures

• Risk reporting

• Finding follow-up

• Corrective-action tracking

• Whistleblower reporting

• External audit

• Public transparency

This objective creates the accountability mechanism for the other eleven.

The TUSD COSO Objective Structure I Would Recommend

I would put this on one page for the Governing Board and Audit Committee:

#	COSO Category	TUSD Enterprise Objective
1	Operations	Improve Student Academic Achievement
2	Operations	Sustain and Increase Enrollment
3	Operations	Maintain Safe and Effective Schools
4	Operations	Recruit and Retain a Qualified Workforce
5	Operations	Maintain Financial Sustainability and Liquidity
6	Operations	Use Public Resources Efficiently and Effectively
7	Reporting	Produce Reliable Financial Reporting
8	Reporting	Provide Transparent and Complete Budget Reporting
9	Reporting	Maintain Reliable Student and Operational Data
10	Compliance	Comply With Laws, Regulations, Grants and Policies
11	Compliance	Prevent and Detect Fraud, Waste and Abuse
12	Operations/Compliance	Maintain Effective Governance and Accountability

But I Would Go One Step Further

Each objective should have a measurable target.

For example:

Objective 1 — Academic Achievement

Not simply:

Improve academic achievement.

Instead:

Increase defined academic achievement measures by X% by June 30, 2027, with specific targets established for identified student populations.

Objective 2 — Enrollment

Not:

Increase enrollment.

Instead:

Achieve FY2027 enrollment of X students and maintain actual enrollment within ±1% of the enrollment assumption incorporated into the adopted budget.

Objective 5 — Financial Sustainability

Not:

Maintain financial stability.

Instead:

Maintain unrestricted liquidity sufficient to fund at least X months of recurring operating expenditures and maintain projected liquidity above the Governing Board's established minimum throughout the rolling 18-month forecast period.

Now COSO becomes useful.

For TUSD, I would therefore establish the governing logic as:

MISSION → OBJECTIVES → RISKS → CONTROLS → EVIDENCE → RESULTS → ACCOUNTABILITY

The weakness I would be most concerned about is not whether TUSD has a strategic plan—it clearly does. The harder question is whether its broad strategic goals have been converted into specific, measurable enterprise objectives with defined risk tolerances, accountable owners, key controls, performance indicators and Governing Board monitoring. The published strategic plan establishes substantial direction, but the COSO assessment should test whether that next layer actually exists.

That would be an excellent framework for a “TUSD COSO Enterprise Risk Assessment” and, more importantly, would give the Audit Committee a defensible structure for determining what Internal Audit should be auditing.