Internal Audit Department Overview

The Internal Audit Department at the University of North Carolina Charlotte is led by Chief Audit Officer Jennifer Walker and Internal Audit Manager Kevin Vehar. The team provides risk-based assurance, advisory services, and investigations to enhance organizational value. Their mission is to offer objective evaluations and recommendations to improve internal operations. Services include operational, financial, and compliance audits, along with professional guidance based on the Institute of Internal Auditors International Professional Practices Framework. The department follows a risk-based auditing approach to align audit projects with organizational goals.

• Internal Audit
• Risk-Based Auditing
• Assurance
• Advisory Services
• University

bellatrix Follow

Uploaded on Aug 31, 2024 | 2 Views

Download Presentation

Please find below an Image/Link to download the presentation.

The content on the website is provided AS IS for your information and personal use only. It may not be sold, licensed, or shared on other websites without obtaining consent from the author.If you encounter any issues during the download, it is possible that the publisher has removed the file from their server.

You are allowed to download the files provided on this website for personal or commercial use, subject to the condition that they are used lawfully. All files are the property of their respective owners.

The content on the website is provided AS IS for your information and personal use only. It may not be sold, licensed, or shared on other websites without obtaining consent from the author.

Presentation Transcript

1. FY 2024 Audit Plan Kickoff Jennifer Walker, Chief Audit Officer Kevin Vehar, Internal Audit Manager June 15, 2023

2. Internal Audits Organizational Structure Chair, Audit, Compliance and ERM Committee (ACERM) Chancellor of the University of North Carolina Charlotte Dr. Sharon L. Gabor Vice Chancellor for Institutional Integrity & General Counsel Jesh Humphries Chief Audit Officer Jennifer Walker Information Technology Auditor Tarveras Rogers Internal Audit Manager Kevin Vehar Senior Auditor Cyndi Autenrieth Staff Auditor Diana Hill Staff Auditor Monique Emery

3. Audit Staff Introductions Kevin Vehar, Internal Audit Manager Tarveras Rogers, Information Technology Auditor Cyndi Autenrieth, Senior Auditor Diana Hill, Staff Auditor Monique Emery, Staff Auditor

4. About Us Mission: To enhance and protect organizational value by providing risk-based and objective assurance, advice, and insight. Vision: To be a respected campus partner whose advice is sought and whose integrity is beyond reproach, with a highly skilled and professionally credentialed staff to provide unbiased evaluations with actionable recommendations, continuously seek to improve internal operations and service delivery through quantitative and qualitative evaluations and measurements.

5. Services Provided Audits (Operational, Financial, and Compliance) Investigations Advisory Services Training Sessions Committee Service (Searches, Governance, and Advisory) Check out our website for more information: https://internalaudit.charlotte.edu/

6. Professional Guidance Institute of Internal Auditors International Professional Practices Framework

7. Risk Based Auditing Performance Standard 2010: The Chief Audit Executive must establish a risk-based plan to determine the priorities of the internal audit activity, consistent with the organization s goals. We use a methodology that links audit projects to higher risk areas within the University.

8. Audit Plan Development Process Review current fiscal year Audit Plan for unfinished projects. Perform a risk assessment to select projects to be included on the Audit Plan. Present proposed Audit Plan to the Chancellor for approval. Present proposed Audit Plan to the ACERM Committee for approval.

9. Components of the Risk Assessment Feedback from members of the ACERM Committee Feedback from the Chancellor and members of the Cabinet Time since the last audit Number of findings in the last audit Dollar-value of transactions processed through the area Changes in policies, rules or regulations New system development Changes in key personnel

10. FY 2024 Audit Plan Recharge Units Housing and Residence Life- Admin Review PCards (Continuous Monitoring) Corporate Governance Strategic Plan International Admissions Grants- Post Award IT Projects Prioritization (Deferred from FY 2023) Millennial Campus- Business Partnerships Criminal Justice Information Services (CJIS) Compliance College of Health & Human Services Admin Review Niner Research Post Implementation Review NCAA Compliance Name, Image, & Likeness IT General Controls - Student Affairs - Housing and Residence Life EHSO Heavy Equipment Safety Internal Controls Testing Cybersecurity- Follow Up

11. The Anatomy of an Audit Planning Testing Conclusion Management Action Plan Follow-Up

12. Planning Review prior audit workpapers and reports. Review past audit results for the area performed by peer universities. Review federal, state, and local regulations. Review NC System Office and University Policies and Procedures. Perform walkthroughs of the process. Identify process area risks and controls. Finalize the audit scope and objectives.

13. Testing Test internal controls to ensure they are working. Review processes for best practices. Look for opportunities to add value. Provide bi-weekly status updates via email to share the progress made, observations/findings, and next steps.

14. Conclusion Summarize findings and observations noted during the audit. Review the findings and observations with unit management in a Closing Meeting (if needed). Draft the audit report and solicit management feedback. Obtain management action plans (if needed). Finalize and publish the audit report. Send out the Customer Satisfaction Survey (via Teammate+)

15. Management Action Plan Follow-Up Monitor action plan due dates for outstanding issues. One to two weeks in advance, we send an email reminder of upcoming due dates. Request and obtain evidence to test management s corrective actions and close out findings in our findings database. Report findings that are not remediated by their due dates to to senior management and the ACERM Committee of the Board of Trustees.

16. What we will ask from you? Time, cooperation, and expertise Documented procedures Supporting documentation for testing Read-only access to software that is unique to your area (i.e. NuPark-PaTS)