Types of Audits

Internal Auditing

Each fiscal year, the Internal Audit Department develops the annual Audit Plan and presents it to the Audit and Compliance Committee for its review and approval. This Audit Plan is primarily based on a University-wide risk assessment. The objectives of each audit are based upon the initial objectives in the annual Audit Plan, the perceived needs of the function, department, school, and college, and preliminary risk assessment performed by the internal auditor.

Audits are categorized into the following common areas:

Management and Performance Audits

This type of audit focuses on evaluating whether an organization is achieving its goals and objectives regarding efficiency and effectiveness of its operations based on criteria or metrics determined. The goals of the evaluation are to improve operations, performance and optimize resources allocation.

Compliance Audits

Compliance audits are the review of organization's financial and operating controls to determine if an organization complies with applicable requirements of provisions of laws, regulations, standards, rules, contracts or grant agreements, and/or University policies and procedures.

Information Technology Audits

The Internal Audit Department conducts audits of information systems organizations, installations, and computerized applications. These audits evaluate the quality of the controls over the University's assets, the effective use of data processing resources, and adherence to management policies. Information Technology audits encourage the design and implementation of adequate controls over computer applications and the computing environments in which they are used.

Special Requests

The Internal Audit Department will conduct an audit based on a request from the Management or the Board of Regents. These special requests may result from concerns about a program, function or account. These audits address specific objectives relating to the concerns.

Fraud Audits

Fraud audits are initiated from irregularities identified during routine audit work, management who find fraud in their organizations, and complaints from various sources including the University Hotline.