Internal Audit and Controls Process

 
INTERNAL AUDIT
PROCESS
 
 
 
PRE-AUDIT PRESENTATION
 
 
OBJECTIVES OF PRESENTATION
 
PROVIDE A BASIC UNDERSTANDING OF INTERNAL AUDIT
PROVIDE A BASIC AWARENESS OF THE PRINCIPLES OF INTERNAL
CONTROLS SO:
YOU HAVE AN UNDERSTANDING OF WHAT WE’RE LOOKING FOR AS WE
CONDUCT THE AUDIT
YOU CAN HELP US IDENTIFY RISKS (POTENTIAL PROBLEMS) THAT
WARRANT ATTENTION
 
WHAT IS INTERNAL AUDIT?
 
INTERNAL AUDITING IS AN 
INDEPENDENT
, 
OBJECTIVE 
ASSURANCE
AND CONSULTING ACTIVITY DESIGNED TO 
ADD VALUE 
AND IMPROVE
AN ORGANIZATION'S OPERATIONS. IT HELPS AN ORGANIZATION
ACCOMPLISH ITS OBJECTIVES BY BRINGING A 
SYSTEMATIC,
DISCIPLINED APPROACH 
TO EVALUATE AND IMPROVE THE
EFFECTIVENESS OF RISK MANAGEMENT, CONTROL, AND
GOVERNANCE PROCESSES. – INSTITUTE OF INTERNAL AUDITOR
 
WHAT DOES INTERNAL AUDIT DO?
 
WE EXAMINE HOW UNIVERSITY DEPARTMENTS AND PROCESSES
OPERATE.
 
OUR EMPHASIS IS ON EVALUATING INTERNAL CONTROLS.
 
UNIVERSITY AUDIT PROCESS
 
PREPARE ANNUAL AUDIT PLAN
CONDUCT INTERNAL AUDIT PLANNING AND OPENING MEETING
PERFORM AUDIT FIELDWORK
CONDUCT PRELIMINARY CLOSING MEETING
OBTAIN MANAGEMENT RESPONSES
DRAFT AUDIT REPORT & DISTRIBUTE
CONDUCT CLOSING MEETING
DISSEMINATE FINAL REPORT
PERFORM AUDIT FOLLOW UP
 
INTERNAL AUDIT REPORTING LINES
Internal Auditor
Board of
Regents
President
 
WHAT ARE INTERNAL CONTROLS?
 
A PROCESS EFFECTED BY AN ORGANIZATION’S 
PEOPLE
, DESIGNED TO
PROVIDE 
REASONABLE ASSURANCE
 
IN THE FOLLOWING 
CATEGORIES
:
EFFECTIVENESS AND EFFICIENCY OF OPERATIONS
RELIABILITY OF FINANCIAL REPORTING
COMPLIANCE WITH LAWS AND REGULATIONS
 
 
COSO DEFINITION – COSO- COMMITTEE OF SPONSORING ORGANIZATIONS OF
THE TREADWAY COMMISSION
 
WHAT ARE INTERNAL CONTROLS?
 
INTERNAL CONTROLS ARE 
PEOPLE
 
DEPENDENT
 
INTERNAL CONTROLS
ARE DEVELOPED BY PEOPLE
GUIDE PEOPLE
PROVIDE ACCOUNTABILITY TO PEOPLE
ARE CARRIED OUT BY PEOPLE
 
WHAT ARE INTERNAL CONTROLS?
 
REASONABLE ASSURANCE??
 
TOO LITTLE CONTROL PRESENTS UNDUE RISK
 
EXCESSIVE CONTROLS ARE COSTLY AND COUNTERPRODUCTIVE
 
UNDUE RISK / EXCESSIVE CONTROLS
 
UNDUE RISKS CAUSE:
LOSS OF ASSETS, DONORS OR
GRANTS
POOR BUSINESS DECISIONS
NONCOMPLIANCE
INCREASED REGULATIONS
PUBLIC SCANDALS
 
EXCESSIVE CONTROLS CAUSE:
INCREASED BUREAUCRACY
REDUCED PRODUCTIVITY
INCREASED COMPLEXITY
INCREASED CYCLE TIME
INCREASE OF NO-VALUE
ACTIVITIES
 
THREE CONTROL CATEGORIES
 
EFFECTIVENESS AND EFFICIENCY OF OPERATIONS
PROCESSES RUN SMOOTHLY AND HELP US MEET OUR OBJECTIVES
RELIABILITY OF FINANCIAL REPORTING
NUMBERS ARE ACCURATE AND ARE AN AID TO DECISION-MAKING
COMPLIANCE WITH LAWS AND REGULATIONS
STAY OUT OF TROUBLE
 
TOO SIMPLIFY:
 
“INTERNAL CONTROLS CAN BE DEFINED AS THOSE PROCESSES THAT
MANAGEMENT RELIES ON TO MAKE SURE THINGS DON’T GET GOOFED
UP.”
     
      
PAUL KANNEMAN
 
INTERNAL CONTROLS FROM
EVERYDAY LIFE
 
YOU ARE PRACTICING GOOD INTERNAL
CONTROLS WHEN YOU
 
STUDY FOR A TEST
MAKE A GROCERY LIST
LOCK YOUR CAR DOORS
SET YOUR ALARM CLOCK
SEE YOUR DENTIST FOR YOUR ANNUAL CHECKUP
STOP HOME DELIVERY OF YOUR MAIL OR
NEWSPAPER WHEN YOU’RE AWAY
 
BEFORE WE PROCEED:
 
WHO IS RESPONSIBLE FOR THE UNIVERSITY’S INTERNAL CONTROLS?
 
EVERYONE INCLUDING YOU
 
FIVE INTERRELATED COMPONENTS OF INTERNAL
CONTROL
 
CONTROL ENVIRONMENT
RISK ASSESSMENT
CONTROL ACTIVITIES
INFORMATION AND COMMUNICATION
MONITORING
 
INTERNAL CONTROL PYRAMID
 
INTERNAL CONTROL PYRAMID
 
INTERNAL CONTROLS ARE NOT SOMETHING THAT ARE SIMPLY LAID ON
TOP OF THE ORGANIZATION
 
INTERNAL CONTROLS MUST PERMEATE THE ORGANIZATION
 
CONTROL ENVIRONMENT
 
THE “TONE AT THE TOP” PROVIDES THE 
FOUNDATION.
INCLUDES THE FOLLOWING ELEMENTS:
DEMONSTRATES COMMITMENT TO INTEGRITY AND ETHICS
EXERCISES OVERSIGHT RESPONSIBILITY
ESTABLISHES STRUCTURE, AUTHORITY, AND RESPONSIBILITY
DEMONSTRATES COMMITMENT TO COMPETENCE
ENFORCES ACCOUNTABILITY
 
RISK ASSESSMENT
 
RECOGNIZING POTENTIAL PROBLEMS AND ENSURING THERE ARE PROCEDURES TO DEAL WITH THEM.
FOUR STEPS TO RISK ASSESSMENT
ESTABLISH OBJECTIVES
WHAT DO YOU WANT TO ACHIEVE?
IDENTIFY RISKS
WHAT CAN HAPPEN?
PLAN RISK MANAGEMENT
WHAT IS OUR RESPONSE?
PLAN FOR CHANGE
IMPLEMENT CONTROL ACTIVITIES
 
INTERNAL RISK FACTORS
 
NEW PERSONNEL
CHANGE IN MANAGEMENT RESPONSIBILITIES
REVAMPED INFORMATION SYSTEMS
NEW PROGRAMS
COMMUNICATION
STUDENT NEEDS OR EXPECTATIONS
 
EXTERNAL RISK FACTORS
 
ECONOMIC ENVIRONMENT
NEW LEGISLATION OR REGULATIONS
NEW TECHNOLOGY
NATURAL DISASTERS, CRIMINAL OR TERRORIST ACTIONS
COMMUNITY NEEDS OR EXPECTATIONS
VENDOR/CONTRACTOR PERFORMANCE AND RELIABILITY
 
CONTROL ACTIVITIES
 
PREVENTATIVE
APPROVAL
AUTHORIZATION
SECURITY
SEGREGATION OF DUTIES
DETECTIVE
VERIFICATION
RECONCILIATION
REVIEW
 
FOR THE FOLLOWING PROBLEM
 
IDENTIFY THE RISK(S) AND
A CONTROL ACTIVITY THAT COULD HAVE REDUCE THE RISK
 
PROBLEM
 
BECAUSE OF THE TIME THE DEPARTMENT SECRETARY HAS SPENT
RECONSTRUCTING THE DEPARTMENT CHAIR’S RESEARCH, OTHER
TASKS ARE LOW PRIORITY.  THE SECRETARY KEEPS CASH RECEIPTS
(CASH AND CHECKS) IN AN UNLOCKED DESK DRAWER.  THE DRAWER
CONTAINS $2000 IN CASH AND 40 CHECKS TOTALING $3000.
SOME CHECKS ARE MORE THAN SIX MONTHS OLD.  SOME HAVE NOT
BEEN ENDORSED AND OTHER HAVE BEEN ENDORSED “UNIVERSITY
NAME.”
 
PROBLEM - RISKS
 
LOST OR STOLEN CASH AND CHECKS
STALE CHECKS
BUDGET SHORTFALL
 
PROBLEM – CONTROL ACTIVITIES
 
RESTRICTIVE ENDORSEMENTS
SECURE LOCATION
CASH RECEIPTS JOURNAL
FREQUENT DEPOSITS
VERIFY DEPOSITS
DEPARTMENT HEAD REVIEW
 
INFORMATION & COMMUNICATION
 
SYSTEMS OR PROCESSES THAT SUPPORT THE IDENTIFICATION,
CAPTURE, AND EXCHANGE OF INFORMATION IN A FORM AND TIME
FRAME THAT ENABLE PEOPLE TO CARRY OUT THEIR RESPONSIBILITIES.
 
MONITORING
 
PROCESSES USED TO ASSESS THE QUALITY OF INTERNAL
PERFORMANCE OVER TIME.  ONGOING MONITORING OCCURS IN
THE ORDINARY COURSE OF OPERATIONS, AND INCLUDES REGULAR
MANAGEMENT AND SUPERVISORY ACTIVITIES.
 
THANK YOU
Slide Note
Embed
Share

This content provides an overview of the pre-audit presentation, objectives of the presentation, the definition of internal audit, the role of internal audit in examining university departments, the university audit process, internal audit reporting lines, and insights on internal controls in an organization. It explains the importance of internal audit in enhancing operations, risk management, and governance processes.

  • Internal Audit
  • Controls Process
  • Risk Management
  • Governance
  • University Audit

Uploaded on Aug 14, 2024 | 3 Views


Download Presentation

Please find below an Image/Link to download the presentation.

The content on the website is provided AS IS for your information and personal use only. It may not be sold, licensed, or shared on other websites without obtaining consent from the author.If you encounter any issues during the download, it is possible that the publisher has removed the file from their server.

You are allowed to download the files provided on this website for personal or commercial use, subject to the condition that they are used lawfully. All files are the property of their respective owners.

The content on the website is provided AS IS for your information and personal use only. It may not be sold, licensed, or shared on other websites without obtaining consent from the author.

E N D

Presentation Transcript


  1. PRE-AUDIT PRESENTATION INTERNAL AUDIT PROCESS

  2. OBJECTIVES OF PRESENTATION PROVIDE A BASIC UNDERSTANDING OF INTERNAL AUDIT PROVIDE A BASIC AWARENESS OF THE PRINCIPLES OF INTERNAL CONTROLS SO: YOU HAVE AN UNDERSTANDING OF WHAT WE RE LOOKING FOR AS WE CONDUCT THE AUDIT YOU CAN HELP US IDENTIFY RISKS (POTENTIAL PROBLEMS) THAT WARRANT ATTENTION

  3. WHAT IS INTERNAL AUDIT? INTERNAL AUDITING IS AN INDEPENDENT, OBJECTIVE ASSURANCE AND CONSULTING ACTIVITY DESIGNED TO ADD VALUE AND IMPROVE AN ORGANIZATION'S OPERATIONS. IT HELPS AN ORGANIZATION ACCOMPLISH ITS OBJECTIVES BY BRINGING A SYSTEMATIC, DISCIPLINED APPROACH TO EVALUATE AND IMPROVE THE EFFECTIVENESS OF RISK MANAGEMENT, CONTROL, AND GOVERNANCE PROCESSES. INSTITUTE OF INTERNAL AUDITOR

  4. WHAT DOES INTERNAL AUDIT DO? WE EXAMINE HOW UNIVERSITY DEPARTMENTS AND PROCESSES OPERATE. OUR EMPHASIS IS ON EVALUATING INTERNAL CONTROLS.

  5. UNIVERSITY AUDIT PROCESS PREPARE ANNUAL AUDIT PLAN CONDUCT INTERNAL AUDIT PLANNING AND OPENING MEETING PERFORM AUDIT FIELDWORK CONDUCT PRELIMINARY CLOSING MEETING OBTAIN MANAGEMENT RESPONSES DRAFT AUDIT REPORT & DISTRIBUTE CONDUCT CLOSING MEETING DISSEMINATE FINAL REPORT PERFORM AUDIT FOLLOW UP

  6. INTERNAL AUDIT REPORTING LINES Board of Regents President Internal Auditor

  7. WHAT ARE INTERNAL CONTROLS? A PROCESS EFFECTED BY AN ORGANIZATION S PEOPLE, DESIGNED TO PROVIDE REASONABLE ASSURANCE IN THE FOLLOWING CATEGORIES: EFFECTIVENESS AND EFFICIENCY OF OPERATIONS RELIABILITY OF FINANCIAL REPORTING COMPLIANCE WITH LAWS AND REGULATIONS COSO DEFINITION COSO- COMMITTEE OF SPONSORING ORGANIZATIONS OF THE TREADWAY COMMISSION

  8. WHAT ARE INTERNAL CONTROLS? INTERNAL CONTROLS ARE PEOPLE DEPENDENT INTERNAL CONTROLS ARE DEVELOPED BY PEOPLE GUIDE PEOPLE PROVIDE ACCOUNTABILITY TO PEOPLE ARE CARRIED OUT BY PEOPLE

  9. WHAT ARE INTERNAL CONTROLS? REASONABLE ASSURANCE?? TOO LITTLE CONTROL PRESENTS UNDUE RISK EXCESSIVE CONTROLS ARE COSTLY AND COUNTERPRODUCTIVE

  10. UNDUE RISK / EXCESSIVE CONTROLS UNDUE RISKS CAUSE: EXCESSIVE CONTROLS CAUSE: LOSS OF ASSETS, DONORS OR GRANTS INCREASED BUREAUCRACY REDUCED PRODUCTIVITY POOR BUSINESS DECISIONS INCREASED COMPLEXITY NONCOMPLIANCE INCREASED CYCLE TIME INCREASED REGULATIONS INCREASE OF NO-VALUE ACTIVITIES PUBLIC SCANDALS

  11. THREE CONTROL CATEGORIES EFFECTIVENESS AND EFFICIENCY OF OPERATIONS PROCESSES RUN SMOOTHLY AND HELP US MEET OUR OBJECTIVES RELIABILITY OF FINANCIAL REPORTING NUMBERS ARE ACCURATE AND ARE AN AID TO DECISION-MAKING COMPLIANCE WITH LAWS AND REGULATIONS STAY OUT OF TROUBLE

  12. TOO SIMPLIFY: INTERNAL CONTROLS CAN BE DEFINED AS THOSE PROCESSES THAT MANAGEMENT RELIES ON TO MAKE SURE THINGS DON T GET GOOFED UP. PAUL KANNEMAN

  13. INTERNAL CONTROLS FROM EVERYDAY LIFE

  14. YOU ARE PRACTICING GOOD INTERNAL CONTROLS WHEN YOU STUDY FOR A TEST MAKE A GROCERY LIST LOCK YOUR CAR DOORS SET YOUR ALARM CLOCK SEE YOUR DENTIST FOR YOUR ANNUAL CHECKUP STOP HOME DELIVERY OF YOUR MAIL OR NEWSPAPER WHEN YOU RE AWAY

  15. BEFORE WE PROCEED: WHO IS RESPONSIBLE FOR THE UNIVERSITY S INTERNAL CONTROLS? EVERYONE INCLUDING YOU

  16. FIVE INTERRELATED COMPONENTS OF INTERNAL CONTROL CONTROL ENVIRONMENT RISK ASSESSMENT CONTROL ACTIVITIES INFORMATION AND COMMUNICATION MONITORING

  17. INTERNAL CONTROL PYRAMID

  18. INTERNAL CONTROL PYRAMID INTERNAL CONTROLS ARE NOT SOMETHING THAT ARE SIMPLY LAID ON TOP OF THE ORGANIZATION INTERNAL CONTROLS MUST PERMEATE THE ORGANIZATION

  19. CONTROL ENVIRONMENT THE TONE AT THE TOP PROVIDES THE FOUNDATION. INCLUDES THE FOLLOWING ELEMENTS: DEMONSTRATES COMMITMENT TO INTEGRITY AND ETHICS EXERCISES OVERSIGHT RESPONSIBILITY ESTABLISHES STRUCTURE, AUTHORITY, AND RESPONSIBILITY DEMONSTRATES COMMITMENT TO COMPETENCE ENFORCES ACCOUNTABILITY

  20. RISK ASSESSMENT RECOGNIZING POTENTIAL PROBLEMS AND ENSURING THERE ARE PROCEDURES TO DEAL WITH THEM. FOUR STEPS TO RISK ASSESSMENT ESTABLISH OBJECTIVES WHAT DO YOU WANT TO ACHIEVE? IDENTIFY RISKS WHAT CAN HAPPEN? PLAN RISK MANAGEMENT WHAT IS OUR RESPONSE? PLAN FOR CHANGE IMPLEMENT CONTROL ACTIVITIES

  21. INTERNAL RISK FACTORS NEW PERSONNEL CHANGE IN MANAGEMENT RESPONSIBILITIES REVAMPED INFORMATION SYSTEMS NEW PROGRAMS COMMUNICATION STUDENT NEEDS OR EXPECTATIONS

  22. EXTERNAL RISK FACTORS ECONOMIC ENVIRONMENT NEW LEGISLATION OR REGULATIONS NEW TECHNOLOGY NATURAL DISASTERS, CRIMINAL OR TERRORIST ACTIONS COMMUNITY NEEDS OR EXPECTATIONS VENDOR/CONTRACTOR PERFORMANCE AND RELIABILITY

  23. CONTROL ACTIVITIES PREVENTATIVE APPROVAL AUTHORIZATION SECURITY SEGREGATION OF DUTIES DETECTIVE VERIFICATION RECONCILIATION REVIEW

  24. FOR THE FOLLOWING PROBLEM IDENTIFY THE RISK(S) AND A CONTROL ACTIVITY THAT COULD HAVE REDUCE THE RISK

  25. PROBLEM BECAUSE OF THE TIME THE DEPARTMENT SECRETARY HAS SPENT RECONSTRUCTING THE DEPARTMENT CHAIR S RESEARCH, OTHER TASKS ARE LOW PRIORITY. THE SECRETARY KEEPS CASH RECEIPTS (CASH AND CHECKS) IN AN UNLOCKED DESK DRAWER. THE DRAWER CONTAINS $2000 IN CASH AND 40 CHECKS TOTALING $3000. SOME CHECKS ARE MORE THAN SIX MONTHS OLD. SOME HAVE NOT BEEN ENDORSED AND OTHER HAVE BEEN ENDORSED UNIVERSITY NAME.

  26. PROBLEM - RISKS LOST OR STOLEN CASH AND CHECKS STALE CHECKS BUDGET SHORTFALL

  27. PROBLEM CONTROL ACTIVITIES RESTRICTIVE ENDORSEMENTS SECURE LOCATION CASH RECEIPTS JOURNAL FREQUENT DEPOSITS VERIFY DEPOSITS DEPARTMENT HEAD REVIEW

  28. INFORMATION & COMMUNICATION SYSTEMS OR PROCESSES THAT SUPPORT THE IDENTIFICATION, CAPTURE, AND EXCHANGE OF INFORMATION IN A FORM AND TIME FRAME THAT ENABLE PEOPLE TO CARRY OUT THEIR RESPONSIBILITIES.

  29. MONITORING PROCESSES USED TO ASSESS THE QUALITY OF INTERNAL PERFORMANCE OVER TIME. ONGOING MONITORING OCCURS IN THE ORDINARY COURSE OF OPERATIONS, AND INCLUDES REGULAR MANAGEMENT AND SUPERVISORY ACTIVITIES.

  30. THANK YOU

More Related Content

giItT1WQy@!-/#giItT1WQy@!-/#giItT1WQy@!-/#giItT1WQy@!-/#