Internal Audit and Advisory Services

Internal Audit & Advisory Services

As a service to campus management and to The Regents, Internal Audit and Advisory Services is an independent appraisal activity established within the University of California for the review of operations as a service to University management and the Regents.  We assist management in their control function to assure the protection and effective utilization of University assets through:

• Accurate identification of risk in achievement of business objectives
• Cost effective design and administration of controls to mitigate risk
• Establishment of reliable accounting and information systems
• Establishment of systems to ensure compliance with applicable laws and regulations

The Annual Audit Plan outlines Internal Audit services under three types of activities as follows:

• Audits: These services include the planned and supplemental program of regular audits of business units (including academic departments) and business processes that cut across all organizational units (e.g., purchasing, travel, etc.).
• Investigations: Pursuant to University policy, Internal Audit conducts investigations into suspected financial irregularities whether reported by whistleblowers, uncovered in the course of regular audits, or based upon concerns conveyed by management.
• Advisory Services: Advisory Services encompasses a broad array of activities beyond regular audits.

More information can be found in the University of California Internal Audit Manual

Services

• Compliance Reviews
• Audit Survival Guide
• Process and internal control reviews (see also Risk Ranking Matrix )
• Advisory services—evaluation of process, policy, control designs
• Fraud investigations
• Systems development and re-engineering controls/team member
• External audit coordination
• Performance/effectiveness reviews
• Information resource
• Internal control, accountability, and fraud awareness training
• Tests & Best Practices
• Conflict of interest coordination
• Gifts to an Agency coordination
• Team member campus advisory teams – Information Security, Investigations Workgroup, HIPAA Security Compliance, IT Incident Response, PCI – Credit Card Security Compliance, Financial Policy, Computing Systems Development, and others as needed

Training and Presentations

• HIPAA Training Modules
• Conflict of Interest Faculty Training Presentation (PowerPoint)
• Conflict of Interests for Employees, including Designated Officials
• UARC Conflict of Interest training (PowerPoint)