Plans and Reports

Audit Plans

Each year Internal Audit conducts a series of interviews with senior leaders and administrators across campus. Based on the information discussed in the interviews, possible audits are identified and risk/ranked based on the following criteria:

  • University Mission/Student or Patient Impact
  • Financial Loss
  • Legal or Regulatory Impact
  • Complexity of the Unit or Process
  • Level of Change
  • Reputational Risk
  • Control Environment - (How well is it managed?)
  • Information Systems - (Is it an IT driven or dependent process?)

Each individual criteria is given a score from one (low risk) to five (high risk) and the sum of all those scores determines the audit's risk ranking.  Those audits with a high risk ranking are evaluated against Internal Audit staffing levels and competencies and the annual audit plan is created.  Each fall, the Audit and Compliance Committee of the Board of Regents reviews and approves our annual audit plan.

Audit Reports

Each quarter the Chief Audit Executive presents completed reports to the Audit and Compliance Committee of the Board of Regents. The Board of Regents docket materials include a short executive summary and a color code which signifies the criticality of the audit findings. 

The summaries of internal audit reports issued can be found in the Iowa Board of Regents meeting agenda items.