||Business and Support Operations
||Date of Present Issue:||
||Date of Previous Issues:
03/79, 08/87, 10/87, 07/88
- Purposes for an internal audit include one or more of the following:
- To identify the existence of weaknesses, if any, of internal financial
- To determine existence, if any, of fraudulent practices.
- To insure that established University financial policies and procedures
are being observed and report deviations to the President/Board of
- Internal Auditor Selection:
- The President will nominate an individual for the position of Internal
Auditor. The nomination will be discussed with the Finance Committee
of the Board of Regents which will make a recommendation for action
to the full Board.
- Internal audits of the President's Office and those offices reporting
directly to the President will be conducted by an auditor external
to the University. In such cases, the Board of Regents will contract
directly with the external auditor for this service on an annual basis.
- Reporting Relationship:
- The Internal Auditor reports to the President and the Board of Regents.
- The President will report to the Finance Committee of the Board of
Regents any actions taken with respect to the personnel status of the
- The Internal Auditor recommends an audit plan. Content of this plan is
- areas to be audited
- purpose(s) of the audit [objective(s)]
- likely assignment of an external or internal audit
- staff member to conduct the audit
The finance subcommittee of the Board of Regents approves or modifies
the recommended audit plan.
Additional audits may be conducted at the discretion of the University
President or Internal Auditor.
- The person assigned the internal audit:
- Designs and writes an audit program to fit the parameters established
in Paragraph #1 above. Audit program development depends directly on
the nature and extent of the audit activity that has been defined in
the objectives. The auditor will develop a detailed plan to meet the
- Prepares an engagement memorandum and sends it to the department
to be audited.
The engagement memorandum is directed to the department head and/or
administrative area to be audited and copies are directed to the
line management over the area to be audited.
The purpose of the engagement memorandum is to present the general
scope and objective(s) of the audit and make the audited area aware
that an audit will take place. It will also establish introductions
and ground-work that will develop the parameters of examination.
The engagement memorandum will ask for an engagement interview
with appropriate department heads.
NOTE: This procedure may be bypassed if prior notice could
jeopardize the success of the audit.
- Conducts an engagement interview with the department head of the
area to be audited.
The engagement interview is a follow-up to the engagement memorandum.
Its purpose is to clarify the objective(s) of the audit. It also
allows the auditor to become acquainted with the type of records
maintained by the audited department; the staff and/or the personnel
responsible for maintaining these records; and physically inspect
the general area. It also serves to refine the audit plan.
- Conducts the audit according to the audit plan. Document all questionable
material internal control and/or work flow/process procedures. Perform
necessary tests and evaluations as required.
- Prepares preliminary audit report documenting the objectives of the
audit, the process followed in conducting the audit, material findings,
supporting evidence, and recommendations.
- Conduct exit interview(s) with the audited department.
The purpose of the exit interview is to review the preliminary
report, eliminating possible misunderstandings and/or misinterpretations.
This may entail additional meetings to "clear the air" on issues
that may be debatable.
- Prepares a final report and submits to:
- Finance Subcommittee of the Board of Regents (if this audit
was approved by this subcommittee)
- Audited department and appropriate vice president
- File copy held by the Internal Auditor
The final report will reveal the scope, program, comments and
recommendations in a formal, summary-type presentation.
- The Internal Auditor will retain a file copy of the audit for a period
of three years from the date of the final report.
- A follow-up review to document adherence to the recommendations in the
final report will be conducted approximately six months after the final report
is issued. The results will be distributed to the line management, the audited
department, and the President.