Internal Audit Section (AUD)
POLICY 2
Effective Date: 07/01/1996
Last Modified Date: 02/10/1997
Risk Assessment
The Internal Audit Department uses a comprehensive risk assessment model to develop a long-range audit plan. This model allows all areas of the University to be evaluated using uniform criteria. Factors and weights used to assess and score each potential audit area include such items as financial statistics; complexity of operations; interaction with other areas of the University or outside parties; consequences of errors or omissions; and the impact of negative publicity. A risk assessment and development of a new long-range plan is done once every five years.
In performing this project, we will use data from University information systems and publications and conduct limited inquiries with staff and management in key operating areas.
Audit Plan
The scores from the risk assessment, staff resources available, and management input are used to develop a long-range audit plan and annual work schedules. The long-range plan covers a five-year time frame and includes blocks of time for routine audits, special projects (those requested by management or involving allegations of misuse), and administrative functions such as staff training and development.
Our goal is to provide the most comprehensive, beneficial audit services to the University. However, since staff resources are limited, we cannot provide coverage to all areas. Therefore, hours for routine audits will be allotted first to sensitive areas and areas determined to have the greatest significance to the University. Routine audits will be scheduled for lower risk areas as time permits or may be addressed through special projects. Work schedules will be updated annually to allow for changes in the University's operating environment.
To the extent possible, the timing of routine audits and special projects will accommodate daily operations as well as "busy seasons" in departments that have variable workloads.
Return to Internal Audit Section Contents
Return to Business Manual Table of Contents