8/10/2019 Sample Strategic IA Plan
1/34
Internal Audit Assurance Strategy and Plans 2002-2005
Name
INTERNAL AUDIT SERVICES
NAME INTERNAL AUDIT ASSURANCE STRATEGY AND PLANS
2002-2005
INDEX
1. Role of Ine!nal A"#$ 1
2. In!o#"%$on an# P"!&o'e of ($' S!ae)* 1
+. A%,nole#)emen' 1
. A"#$ A&&!oa%( 2
5. A"#$ /o!,$n) P!o%e#"!e' an# P!a%$%e' +
The Audit Toolbox 3
Audit Reporting 5
. Ine!nal A"#$ A''$'an%e $n U/CN R$', Mana)emen 5
ee Ea!n$n) /o!, 5
8/10/2019 Sample Strategic IA Plan
2/34
ee Ea!n$n) /o!, 5
Internal Audit Assurance Strategy and Plans 2002-2005
1. Role of Ine!nal A"#$
!#!# Internal Audit $IAS% is an independent and ob&ecti'e appraisal ser'ice (ithinthe )ni'ersity *ollege#
!#2# Internal audit+s pri"ary role is to pro'ide an opinion to the Principal and*hie, xecuti'e and to the .oard o, /o'ernors 'ia the Audit *o""ittee onris "anage"ent control and go'ernance by "easuring and e'aluatingthe e,,ecti'eness o, these controls and syste"s in achie'ing )1*+sagreed ob&ecti'es#
!#3# In addition internal audit pro'ides assurance to "anage"ent on syste"s
that they are responsible ,or and assist "anage"ent in "aingi"pro'e"ents to these syste"s#
!## Ris "anage"ent control and go'ernance co"prise the policiesprocedures and operations established to ensure4
the achie'e"ent o, ob&ecti'es
the appropriate assess"ent o, ris
the reliability o, internal and external reporting and accountability processes
co"pliance (ith applicable la(s and regulations and
co"pliance (ith the beha'ioural and ethical standards set ,or the
organisation#
!#5# Internal audit also pro'ides an independent and ob&ecti'e consultancyser'ice speci,ically to help line "anage"ent i"pro'e the organisation+s ris"anage"ent control and go'ernance# Such consultancy (or contributesto the opinion (hich internal audit pro'ides on ris "anage"ent control
and go'ernance
8/10/2019 Sample Strategic IA Plan
3/34
Internal Audit Assurance Strategy and Plans 2002-2005
. A"#$ A&&!oa%(
R$', Anal*'$'#!# Ris identi,ication and assess"ent belongs to "anage"ent# They not
internal audit are accountable ,or the econo"y e,,iciency and e,,ecti'enesso, ris "anage"ent control and go'ernance# It is there,ore essential thatthe audit strategy is based on "anage"ent+s ris priorities# :uring 200!-02)1* (ith the assistance o, Internal Audit has re'ised its approach to ris"anage"ent# This approach pro'ides )1* (ith a structured"ethodology to identi,y assess and "anage riss to the achie'e"ent o,
their ob&ecti'es##2# Internal Audit (ill see to rely on "anage"ent+s resulting ris analysis and
e'aluation to ,or" the basis ,or this and ,uture plans# In this (ay IAS (ill beable to pro'ide assurance to "anage"ent on the ey riss ,acing )1*as (ell as assist in reducing those riss through its reco""endations#
#3# As (ell as using )1*+s ris assess"ent as the basis ,or its planning IAS(ill undertae additional (or to in,or" its approach# 1e (ill tae accounto, pre'ious assess"ents o, syste"s and processes in )1* the length o,
ti"e since speci,ic syste"s ha'e been re'ie(ed our no(ledge o, thestrengths (eanesses opportunities and threats $both internal andexternal% and other sources o, assurance such as external audit#
## IAS (ill ha'e to conduct an annual re'ie( o, )1*+s ris "anage"entprocess to ensure that it can continue to place reliance on "anage"ent+sris assess"ent as the basis ,or audit planning#
#5# IAS (ill re'ie( its plans annually to tae account o, re'isions in )1*+s risassess"ent enable ne( de'elop"ents to be taen into account and allo(,or the plan to be rolled ,or(ard appropriately
8/10/2019 Sample Strategic IA Plan
4/34
Internal Audit Assurance Strategy and Plans 2002-2005
*hanging processes are risier than those that are (ell established and (ill
re7uire increased audit co'erage
The extent to (hich IAS (ill rely on the (or carried out by others such as our
xternal Auditors
Ad'ice (or carried out by IAS can contribute to the o'erall assurance
pro'ided#
#># Audit co'erage (ill be achie'ed by a co"bination o, strategic andoperational audits# Strategic audits (ill ,ocus on the extent to (hich ris"anage"ent control and go'ernance arrange"ents are (ell directed
(hilst operational audits (ill co'er the extent to (hich these arrange"entsare (oring in practice#
#?# The audit approach and strategy are based on the ,ollo(ing ele"ents4
A three year audit cycle
Audits at an operational le'el to be conducted o'er the audit cycle
Audit co'erage (ill address the range o, riss that )1* identi,ied as
8/10/2019 Sample Strategic IA Plan
5/34
Internal Audit Assurance Strategy and Plans 2002-2005
Application *ertain high ris syste"s thatha'e been sub&ect to a ,ull syste" re'ie(
during the period and (here co"pliance,ailures (ould "aterially a,,ect )1*+s ris"anage"ent control and go'ernancearrange"ents#
5#5#
8/10/2019 Sample Strategic IA Plan
6/34
Internal Audit Assurance Strategy and Plans 2002-2005
A"#$ Re&o!$n)A''$)nmen Le=el
5#?# IAS (ill prepare a (ritten report su""arising audit co'erage ,indingsreco""endations ,or i"pro'e"ents in control $(here appropriate% and ano'erall audit opinion on the syste" re'ie(ed#
6!)an$'a$onal Le=el
5#!0# IAS (ill prepare regular progress reports to the Audit *o""ittee ti"ed to
co-incide (ith the progra""e o, co""ittee "eetings#5#!!# The Internal Audit 8anager (ill prepare an Annual Report su""arising
audit acti'ity throughout the year and setting out his o'erall opinion on)1*+s ris "anage"ent control and go'ernance arrange"ents#
?"al$* A''"!an%e
San#a!#'
5#!2# IAS sta,, (ill be re7uired to conduct all audit acti'ity in accordance (ith thepro,essional and ethical standards set out in the /o'ern"ent Internal AuditStandards and 9F*1 Audit *ode o, Practice# The )1* Internal Audit*harter and 8anual ha'e been (ritten to "eet these standards and (ill beupdated and "aintained to re,lect any ,uture changes to the standards#
Pe!fo!man%e Mea'"!e' an# In#$%ao!'
5#!3# IAS has set out proposals to introduce a range o, per,or"ance "easuresand indicators in its *harter#
. Ine!nal A"#$ A''$'an%e $n U/CN R$', Mana)emen
6 ! I t l A dit h b l l i l d i th i d l h ,
8/10/2019 Sample Strategic IA Plan
7/34
Internal Audit Assurance Strategy and Plans 2002-2005
to identi,y ,urther ,ee earning opportunities to supple"ent the (or at the
Asse"bly concentrating (here possible on higher ,ee earning areas such
as Ris 8anage"ent training and consultancy# This (ill include "aing,urther contact (ith local 9I+s as (ell as exploring spin o,, (or ,ro" there'ie(s carried out at the ational Asse"bly ,or 1ales#
;## It is anticipated that the ne( Internal Auditor (ho taes up her post inSepte"ber 2002 (ill pro'ide little ,ee earning (or in the ,irst year as shede'elops her internal audit sills and experience and de'elops her roleinternal to )1*# 9o(e'er it is anticipated to "ae greater use o, her inthis role in the ,uture and this is re,lected in the detailed plan#
;#5# At all ti"es the priority o, IAS (ill be the co"pletion o, the )1* internalaudit plan to allo( us to pro'ide ade7uate assurance to the Principal and.oard o, /o'ernors on the ,ra"e(or o, control#
3. L$n,' To In'$"e of Ine!nal A"#$o!' 4IIA an# 6(e!7o#$e'
>#!# The Internal Audit 8anager has taen on acti'e roles (ithin the Institute o,Internal Auditors )B and Ireland by sitting on the 8areting *o""ittee o,
the ational body and on the South 1est Regional *o""ittee# Thisbene,its )1* by raising its pro,ile by ensuring that IAS are a(are o, thelatest changes in internal audit and ris "anage"ent by in,luencing thede'elop"ent o, the pro,ession and "aing lins (ith other 9eads o, InternalAudit allo(ing the sharing o, in,or"ation and de'eloping sales leads#
>#2# IAS are also a corporate "e"ber o, the *ouncil o, 9igher ducationInternal Auditors# This is a specialist group a,,iliated to the IIA# IAS attendstheir 7uarterly "eetings and this again bene,its )1* as stated abo'e#
> 3 Th i l d i th ti iti i i l i t th ti
8/10/2019 Sample Strategic IA Plan
8/34
Internal Audit Assurance Strategy and Plans 2002-2005
!0#!# stablished internal audit practice had been to re'ie( all "a&or syste"s(ithin an organisation at least once o'er a ,ixed planning cycle usually 3 to
5 years# In accordance (ith this IAS practice had been to agree a threeyear audit cycle (ith )1* based on a detailed audit needs assess"ent#9o(e'er ongoing de'elop"ents in the approach to *orporate /o'ernance(ithin the public sector coupled (ith de'elop"ents in the internal auditpro,ession ha'e resulted in organisations and internal audit practitionersre'ie(ing their approach to planning and ris assess"ent#
!0#2# IAS plans ,or 2002-03 re,lect this changing en'iron"ent# IAS agreed toassist on a consultancy basis in re'ie(ing and i"ple"enting a ris
"anage"ent ,ra"e(or in )1* (hich it (as agreed (ould also ,or" thebasis ,or IAS+s audit assurance strategy#
!0#3# This consultancy (or (ill in,or" the Internal Audit 8anager+s annualopinion on the organisation+s ris "anage"ent control and go'ernancearrange"ents#
!0## The ,ollo(ing is IAS planned (or ,or 200203# The plan states the na"eand description o, the area o, (or and its planned ti"ing# It also states itsrelati'e priority# In the e'ent that IAS ,all behind in the co"pletion o, the
plan due to un,oreseen e'ents additional (or or syste"s pro'ing "oreco"plex than originally assessed the lo( priority assign"ents (ill be"o'ed to the ,ollo(ing year# The priority is set based on the relati'e ris o,the syste"s under re'ie( as described in Annex *#
Planne# Re=$e' 200290+9P!$o!$*
De'%!$&$on Planne#
T$m$n)
8/10/2019 Sample Strategic IA Plan
9/34
Internal Audit Assurance Strategy and Plans 2002-2005
5# Finance Debtors
Priority 2
As stated in the StrategicPlan#
Re'ie( to beconducted in
o'e"ber and:ece"ber 2002# Toco"plete in Eanuary2003#
6# Follow-Up of Cleaning ServicesReview
Priority 3
As stated in the StrategicPlan#
Cctober 2002
;# uropean FundingPriority 2
Planned assistance to*o""unity )ni'ersity o, theGalleys pro&ect to ,acilitate asel, assess"ent o, theiroperating procedures#
Cctober 02
># Academic Standards
Priority 1
As stated in the StrategicPlan#
Cctobero'e"ber 02
?# Corporate !overnancePriority 1
As stated in the StrategicPlan# o'e"ber:ece"ber02
!0# "ntellectual Property Rig#ts
Priority 2
As stated in the StrategicPlan#
EanuaryFebruary 03
!!# Contingency Planning
Priority 2
As stated in the StrategicPlan#
EanuaryFebruary 03
!2 $ lt# d S f t A t t d i th St t i 8 h 03
8/10/2019 Sample Strategic IA Plan
10/34
Internal Audit Assurance Strategy and Plans 2002-2005
Priority 3 Plan# the year#
20# &raining and evelopment
Priority 2
As stated in the StrategicPlan#
Cn-going throughoutthe year#
DI*A exa" in Eune2003#
2!# U,C+ Ris) *anagement
Priority 2
As stated in the StrategicPlan#
Cn-going throughoutthe year#
22# Recommendation Follow Up
Priority 1
Tracing and ,ollo( up o,
reco""endations issued byInternal Audit#
Duarterly#
23# Annual Planning and Reporting
Priority 1
As stated in the StrategicPlan#
EulyAugust 2003
2# Advice. Follow up andContingency
Priority to /e decided on a per
case /asis
As stated in the StrategicPlan#
As it occurs#
8/10/2019 Sample Strategic IA Plan
11/34
Internal Audit Assurance Strategy and Plans 2002-2005
11. S!ae)$% Plan 2002905
In!o#"%$on!!#!# The basis ,or the de'elop"ent o, this plan (ere the riss identi,ied by
)1* as part o, its ris "anage"ent process and the "apping o, thoseriss to )1*+s syste"s# Annex A sho(s the ey riss!identi,ied by )1*and Annex . is a breado(n o, the syste"s that exist (ithin )1*#
!!#2# The resulting tables identi,y our planned audit co'erage ,or the period 2002-05# Achie'e"ent o, this plan (ill ,ocus on )1*+s identi,ied ris priorities(hilst ensuring a su,,icient body o, (or across the ,ull range o, )1*+s
operations# Although planned audits ha'e been "apped to )1*+s eyriss the audit areas sub&ect to re'ie( (ill also pro'ide assurance on a (iderange o, non-ey riss# Table ! details our proposed audit co'erage o'erthe period o, the plan and Table 2 "aps this co'erage to )1*+s eyriss as identi,ied by the 8anage"ent .oard#
!!#3# 1e ha'e prioritised audit co'erage based on the a"ount o, ris thesyste"s represent to )1* IAS+s opinion on the stability o, the syste"and the length o, ti"e since it (as last re'ie(ed# The relati'e priority o, the
audits (ill change during the li,e o, this plan as the rele'ant riss changeare "anaged by )1* and IAS con,idence in the "anage"ent o, thosesyste"s increases ,ollo(ing re'ie(# Annex * gi'es a su""ary o, the rissco'ered by each suggested audit# Further detail on the analysis carried outto reach this conclusion is a'ailable ,ro" Internal Audit#
!!## The audits per,or"ed (ill consider the speci,ic riss identi,ied by the ris"anage"ent process in addition to pro'iding o'erall assurance on thesyste"#
!! 5 Th l h b d d th ti th t th ill b , ll ti
8/10/2019 Sample Strategic IA Plan
12/34
Internal Audit Assurance Strategy and Plans 2002-2005
Ta>le 1@ S%(e#"le of A"#$ Co=e!a)e 2002-05
A"#$ Da*'
P!$o!$* Planne# A"#$'9 Le=el of R$',R$', Co=e!a)e
De'%!$&$on Yea! 1 Yea! 2 Yea! +
1. Academic Standards Full re'ie( o, the controls operating that ensure that the courses and lecturing
pro'ided by oursel'es and ,ranchises are o, opti"u" 7uality#
30 0 0
2# Accommodation Services Full re'ie( o, the controls that ensure that acco""odation pro'ided students andothers are o, su,,icient 7uality#
0 25 0
3# Annual Review of CoreSystems
*o"pliance and substanti'e testing to con,ir" the continuing operation o, eycontrols operating o'er the core syste"s#
This re'ie( (ill be carried out annually and (ill incorporate the use o, datainterrogation as (ell as "anual checs#
The re'ie(s (ill pro'ide "anage"ent (ith assurance that the ey controls (ithinthe core ,inancial syste"s continue to operate e,,ecti'ely#
Additional days allocated in the ,irst year to carry out a re'ie( o, the auditapproach to this area and to incorporate the use o, data interrogation#
30 25 25
# Full Review of Core Systems :uring the 3 year li,e cycle o, the plan each o, the *ore Financial Syste"s (ill besub&ect to ,ull internal audit re'ie( in addition to the testing ,ocussed annualre'ie(#
The re'ie(s (ill pro'ide "anage"ent (ith an in depth assurance o, the e,,iciencyand e,,ecti'eness o, the *ore Financial Syste"s#
0 0 0
Finance Asset Management Full re'ie( o, the controls that ensure that assets are e,,ecti'ely and securelyheld used and disposed o, (ith su,,icient co"plete and accurate in,or"ationa'ailable ,or incorporation into the ,inancial accounts#
5 0 0
Finance Cash and Bank Full re'ie( o, the controls that ensure that cash and ban accounts held by)1* are held and used e,,ecti'ely and securely#
5 0 0
Finance Debtors Full re'ie( o, the controls that ensure that credit control is (oring e,,ecti'ely anddebts are identi,ied and pro"ptly resol'ed#
5 0 0
Finance Creditors Full re'ie( o, the controls that ensure that pay"ents to )1*+s creditors areaccurate and ti"ely and that the pay"ent "echanis"s are secure and e,,icient#
0 0 5
Internal Audit Ser'ices
8/10/2019 Sample Strategic IA Plan
13/34
Internal Audit Assurance Strategy and Plans 2002-2005
A"#$ Da*'
P!$o!$* Planne# A"#$'9 Le=el of R$',R$', Co=e!a)e
De'%!$&$on Yea! 1 Yea! 2 Yea! +
Finance Financial Accounting Full re'ie( o, the controls that ensure that )1*+s ,inancial accounts areprepared using accurate co"plete and ti"ely in,or"ation and that appropriateaccounting procedures "ethods and standards are applied#
0 5 0
Finance Income Full re'ie( o, the controls that ensure that ,unds due to )1* are pro"ptly andsecurely collected#
0 0 5
Finance Management Accounts Full re'ie( o, the controls that ensure that )1*s "anage"ent accounts areprepared using accurate co"plete and ti"ely in,or"ation and that subse7uentreports "eet the needs o, )1* and are the"sel'es accurate co"plete andti"ely# Full re'ie( o, the controls operating o'er the corporate and depart"entalbudgeting process to ensure that )1* accurately predicts its ,inancialre7uire"ents sets budgets e,,ecti'ely and ade7uately "anages those budgets#
0 !0 0
Finance Other Full re'ie( o, the controls that ensure that )1*+s insurance tax and GAT areappropriately "anaged#
0 0 5
Finance Payroll Full re'ie( o, the controls that ensure that )1*+s payroll is accurately andsecurely paid to legiti"ate e"ployees#
0 0 5
Finance Procurement Full re'ie( o, the controls that ensure that )1* achie'es 'alue ,or "oney ,ro"its procure"ent o, goods and ser'ices and that the procure"ent process ise,,icient and e,,ecti'e#
0 5 0
Finance Treasury Management Full re'ie( o, the controls that ensure that )1*+s in'est"ents and ,inancingachie'es 'alue ,or "oney and is secure#
0 5 0
5# 0uilding and !rounds*aintenance
Full re'ie( o, the controls that ensure that )1*+s buildings and estates aree,,iciently and e,,ecti'ely "aintained#
0 0 !5
6# Capital ,or)s Full re'ie( o, the controls that ensure that capital pro&ects best "eet )1*+sneeds are planned and executed to budget and ti"e and represent 'alue ,or
"oney#
0 0 25
;# Catering Full re'ie( o, the controls that ensure that )1*+s catering ,acilities "eet theob&ecti'es o, the )ni'ersity *ollege satis,y the expectations o, its custo"ers ando,,ers 'alue ,or "oney#
0 20 0
Friday !3 Septe"ber 2002 !3
8/10/2019 Sample Strategic IA Plan
14/34
Internal Audit Assurance Strategy and Plans 2002-2005
A"#$ Da*'
P!$o!$* Planne# A"#$'9 Le=el of R$',R$', Co=e!a)e
De'%!$&$on Yea! 1 Yea! 2 Yea! +
># Conference *anagement Full re'ie( o, the controls that ensure the use o, con,erence ,acilities is opti"isedand that e'ents are e,,iciently and e,,ecti'ely organised and conducted#
0 20 0
?# Contingency Planning Full re'ie( o, the controls that ensure that )1* is able to 7uicly ande,,ecti'ely continue operations and return to nor"ality in the e'ent o, a disaster#
!0 0 0
!0# Corporate !overnance A ,ull re'ie( o, the *orporate /o'ernance "echanis"s and structures (ill becarried out once during the li,e o, the plan# This (ill be supple"ented (ith annualre'ie(s o, ris "anage"ent#
The re'ie( (ill pro'ide "anage"ent (ith assurance that ey controls operatingo'er the go'ernance and probity o, )1* are e,,ecti'e#
25 0 0
!!# Corporate Planning Full re'ie( o, the controls that ensure that )1* "aes e,,ecti'e corporate andoperational decisions e,,ecti'ely co""unicates its decisions to sta,, and otherstaeholders and is able to tae pro"pt and e,,ecti'e action in light o, changes toits en'iron"ent or 'ariation ,ro" its planned acti'ity#
0 30 0
!2# states Strategy Full re'ie( o, the controls that ensure that the ,uture needs o, )1*+s buildingestate and utilities (ill be "et#
0 0 25
!3# uropean Funding Full re'ie( o, the controls that ensure that )1* "aes opti"u" use o,uropean ,unding and co"plies (ith the re7uire"ents o, that ,unding#
It is also liely that ,urther on-going ad'ice (ill be gi'en in this area#
!5 0 25
!# Follow-Up of CleaningServices Review
i"ited co"pliance testing at the re7uest o, the Audit *o""ittee to gi'eassurance that the reco""endations o, the *leaning Ser'ices re'ie( ha'e beeni"ple"ented#
5 0 0
!5# Franc#ising Full re'ie( o, the controls that ensure that )1* "aes opti"u" use o,,ranchising opportunities in the )B and abroad and that the standards andconduct o, such partner institutions "eets )1* expectations#
30 0 0
!6# $ealt# and Safety Full re'ie( o, the controls that ensure that the health and sa,ety o, )1* sta,,and students is protected as ,ar as is possible and that rele'ant legislation isco"plied (ith#
!5 0 0
Friday !3 Septe"ber 2002 !
8/10/2019 Sample Strategic IA Plan
15/34
Internal Audit Assurance Strategy and Plans 2002-2005
A"#$ Da*'
P!$o!$* Planne# A"#$'9 Le=el of R$',R$', Co=e!a)e
De'%!$&$on Yea! 1 Yea! 2 Yea! +
!;# $uman Resources Full re'ie( o, the controls that ensure that )1* has su,,icient sta,, (ith there7uired sills and experience to "eet its ob&ecti'es#
0 0 25
!># "&'"S - "nstallation Full re'ie( o, the controls that ensure the co"puter syste"s hard(are andinstallation acti'ity operate in a controlled secure and "anaged en'iron"ent#
0 !5 0
!?# "ntellectual Property Rig#ts Full re'ie( o, the controls that ensure that )1*+s intellectual property ise,,ecti'ely exploited and protected#
20 0 0
20# %earning Resources Full re'ie( o, the controls that ensure that students o, )1* ha'e access tosu,,icient learning "aterial and support#
25 0 0
2!# "&'"S - +etwor)s Full re'ie( o, the controls that ensure that )1*+s net(or is e,,ecit'e robustand secure#
0 0 !5
22# "&'"S - (perating Systems Full re'ie( o, the controls that ensure that )1*+s P* operating syste"s aree,,ecti'e robust and secure#
!5 0 0
23# "&'"S - PC Controls Full re'ie( o, the controls that ensure that )1* sta,, and students ha'esu,,icient support and training to carry out their (or ha'e su,,icient hard(areand so,t(are and ha'e an e,,ecti'e robust and secure electronic en'iron"ent in(hich to operate#
0 0 !5
2# "&'"S - Procurement andevelopment of "nformationSystems
Full re'ie( o, the controls that ensure that in,or"ation syste"s and procuredde'eloped by )1* best "eet the needs o, the )ni'ersity *ollege represent'alue ,or "oney and are e,,ecti'ely i"ple"ented#
0 0 20
25# Researc# Full re'ie( o, the controls that ensure that )1* "axi"ises its researchpotential in support o, *orporate Cb&ecti'es#
0 25 0
26# Resource *anagement Full re'ie( o, the controls that ensure that the usage o, )1*+s roo"s isopti"ised and 9F*1 targets "et#
0 25 0
2;# Ris) *anagement An annual re'ie( (ill be "ade o, the ris "anage"ent process to ensure that itcontinues to operate e,,ecti'ely# The re'ie( (ill ,ocus on ensuring that risscontinue to be identi,ied assessed and "anaged throughout )1*#
The re'ie( (ill be supple"ented by a ,ull re'ie( o, *orporate /o'ernance (hich(ill consider the on-going e,,ecti'eness o, the process in "ore detail and in
5 5 !5
Friday !3 Septe"ber 2002 !5
8/10/2019 Sample Strategic IA Plan
16/34
Internal Audit Assurance Strategy and Plans 2002-2005
A"#$ Da*'
P!$o!$* Planne# A"#$'9 Le=el of R$',R$', Co=e!a)e
De'%!$&$on Yea! 1 Yea! 2 Yea! +
co"parison to best practice#
The re'ie( (ill pro'ide "anage"ent (ith assurance that the ris "anage"ent
process continues to be robust and to allo( internal audit to place reliance on theris "anage"ent process in pro'iding direction ,or its (or#
2># Sales and *ar)eting andPu/lic Relations
Full re'ie( o, the controls that ensure that )1*+s courses and ,ee earningacti'ities e,,ecti'ely "eet the de"ands o, their respecti'e "arets and areopti"ally priced and pro"oted# Also the controls that ensure that opti"alrelations are "aintained bet(een )1* its staeholders and the public ingeneral#
0 0 25
2?# Sports Centre Full re'ie( o, the controls that ensure that )1*+s sports ,acilities "eet thede"ands o, students sta,, and other custo"ers inco"e le'els are opti"ised andthe health and sa,ety o, sta,, students and other custo"ers is sa,eguarded#
20 0 0
30# Student Records Full re'ie( o, the controls that ensure that student records are accurately andco"pletely captured stored and reported and that access is secure and e,,ecti'e#
0 35 0
3!# Student RecordsReplacement System
Cn-going syste"s de'elop"ent re'ie( to pro'ide assurance that controls areoperating that (ill ensure that the replace"ent student records syste" selects theopti"u" replace"ent that best represents 'alue ,or "oney that syste" (ill bee,,iciently and e,,ecti'ely procured de'eloped and i"ple"ented and ,inancialbudgets and ti"e targets (ill be "et#
20 20 20
Friday !3 Septe"ber 2002 !6
8/10/2019 Sample Strategic IA Plan
17/34
Internal Audit Assurance Strategy and Plans 2002-2005
+on-U,C+ Assurance ,or) 0 0 0
32# Fee arning ,or) Ti"e set aside (ill be used to identi,y (in and deli'er ,ee-earning (or on behal,o, )1*#
Initially this (ill pri"arily be supplied by the Internal Audit 8anager but it is
planned to include the ser'ices o, the Internal Auditor in ,uture years#Initial targets (ill be to supply ,urther (or ,or the ational Asse"bly ,or 1alesInternal Audit Ser'ices and ,urther de'elop this relationship# .eyond thisadditional targets (ill include other local 9Is and possible spin o,, (or ,ro"Asse"bly internal audit assign"ents# Additional (or (ill ,ocus on high ,eeearning areas such as ris "anage"ent training and consultancy#
30 50 50
33# Attendance at ""A'C$"Acommittees'events
Attendance at these e'ents raises the pro,ile o, )1* ensures that IAS is a(areo, the latest de'elop"ents in the ,ields o, Internal Audit and Ris 8anage"entallo(s us to in,luence de'elop"ents in the pro,ession and pro'ides possiblecontacts ,or ,ee earning (or#
!5 !5 !5
3# &raining and evelopment To ensure that IAS continues to "axi"ise the ser'ice it pro'ides to )1* and,ee earning clients re7uires that its sta,, continue to de'elop their sills andexperiences#
The Internal Auditor has co"e ,ro" an external audit bacground# So (hile she(ill not re7uire ,urther training to ac7uire pro,essional 7uali,ications so"e on the&ob training and courses (ill be re7uired in the ,irst year to de'elop as an internalauditor# This has a ti"e i"plication on both the Internal Auditor and the InternalAudit 8anager#
The Internal Audit 8anager is also undertaing to co"plete the IIA+s specialist ITAudit paper $DI*A% in Eune 2003# This is being undertaen using IIA study guidesand builds on no(ledge already obtained as part o, his current pro,essional7uali,ications#
Further de'elop"ent opportunities ,or the Internal Audit 8anager and Internal
Auditor (ill be identi,ied and agreed in year#
0 25 25
35# U,C+ Ris) *anagement IAS (ill continue to pro'ide assistance in )1*+s ris "anage"ent process bypro'iding training ,acilitation and ad'ice# This is expected to expand to theSchools and :epart"ents ,ollo(ing its integration at a corporate le'el#
!0 !0 !0
Friday !3 Septe"ber 2002 !;
8/10/2019 Sample Strategic IA Plan
18/34
Internal Audit Assurance Strategy and Plans 2002-2005
36# Annual Planning andReporting
The Strategic and Cperational Plans (ill be re'ie(ed annually to ensure that theycontinue to co'er the ey riss ,acing the )ni'ersity *ollege#
A report is produced annually to the Audit *o""ittee and .oard o, /o'ernorsgi'ing assurance o'er the ,ra"e(or o, control and reporting on Internal Audit+s inyear acti'ity#
5 5 5
3;# Advice. Follow up and
Contingency
Further ad'ice and guidance (ill be pro'ided to Schools and :epart"ents as
re7uired throughout the year# IAS "ay also be called upon to carry out speci,icre'ie(s during the year#
This contingency also pro'ides scope to expand the (or conducted on auditsalready planned during the year should the need arise#
5? 63 62
&otal Audit ays 0 0 0
Friday !3 Septe"ber 2002 !>
8/10/2019 Sample Strategic IA Plan
19/34
Internal Audit Assurance Strategy and Plans 2002-2005
Ta>le 2@ IAS A&&!oa%( o (e a"#$ of U/CN' Co!&o!ae R$','
The ,ollo(ing table "aps the planned audit co'erage ,or the next three years to the *orporate Riss identi,ied by P8/# Thisde"onstrates ho( Internal Audit (ill assist "anage"ent in the reduction o, these riss by re'ie(ing the syste"s through (hich they are"anaged and "aing reco""endations to i"pro'e those syste"s#
U/CN Co!&o!ae R$',' A"#$ A&&!oa%(
R$',Co#e
R$',A!ea ToalR$',
P!o> Im& Planne# Co=e!a)e Yea!
/o'ern"ent Policy *orporate /o'ernance
Sales and 8areting and Public Relations
*orporate Planning
2002-03
200-05
2003-0
!3 Acti'ities o, sta,, or students# *orporate /o'ernance
9u"an Resources
2002-03
200-05
!! Retention o, ey sta,, 9u"an Resources 200-05
? Recruit"ent o, sta,, 9u"an Resources
*ore Syste"s
200-05
Annual
; Ad"in and s upport - In,or"ationSyste"s
Procure"ent and :e'elop"ent o,In,or"ation Syste"s
Student Records Replace"ent Syste"
200-05
Cn-going
5 Attaining *onstituent Institution Status *orporate /o'ernance
Research
2002-03
2002-03
! 9o"e and ) Student u"bers Sales and 8areting and Public Relations
Acade"ic Standards
Franchising
200-05
2002-03
2003-0!5 Research Strategy Research
*orporate Planning
2002-03
2003-0
Friday !3 Septe"ber 2002 !?
8/10/2019 Sample Strategic IA Plan
20/34
Internal Audit Assurance Strategy and Plans 2002-2005
R$',Co#e
R$',A!ea ToalR$',
P!o> Im& Planne# Co=e!a)e Yea!
6 *o"petitor Acti'ity *orporate Planning
Sales and 8areting and Public Relations
2003-0
200-05
!6 )tility Ser'ice states Strategy 200-05
> Sta,, Relationships 9u"an Resources 200-05
2 Acade"ic Duality and Standards Acade"ic Standards
Franchising
2002-03
2003-0
3 Financial Resources *ore Syste"s
Finance 8anage"ent Accounts
Finance Treasury 8anage"ent
Annual
2003-0
2003-0
23 Franchise Student u"bers Franchising 2003-0
2! Strategic 8anage"ent :ecisions *orporate /o'ernance
*orporate Planning
2002-03
2003-052; Ad"in and Support H 8anual
Syste"sGarious
! Terroris" *ontingency Planning 2002-02
!0 9ealth and Sa,ety 9ealth and Sa,ety
*orporate /o'ernance
2002-02
2002-03
!2 /o'ernance 8echanis"sProbity *orporate /o'ernance
*ore Syste"s
2002-03
Annual
!> Intellectual Property Rights Intellectual Property Rights 2002-03
2 Short *ourse u"bers Sales and 8areting 200-05
25 Student :ebt *ore Syste"s
Finance :ebtors
Annual
2002-03
Friday !3 Septe"ber 2002 20
8/10/2019 Sample Strategic IA Plan
21/34
Internal Audit Assurance Strategy and Plans 2002-2005
R$',Co#e
R$',A!ea ToalR$',
P!o> Im& Planne# Co=e!a)e Yea!
22 International Student u"bers Sales and 8areting
*orporate Planning
Franchising
200-05
2003-0
2003-0
Friday !3 Septe"ber 2002 2!
8/10/2019 Sample Strategic IA Plan
22/34
Internal Audit Assurance Strategy and Plans 2002-2005
12. Anne: A ;
8/10/2019 Sample Strategic IA Plan
23/34
Strategic Internal Audit Plan 2002-2005
1+. Anne: 7 - A"#$ Un$=e!'e
The ,ollo(ing are the ey identi,ied syste"s that "ae up the )ni'ersity *ollegesoperations
A"#$a>le Un$ 4S*'em
Control nvironment/o'ernance - *o"pliance (ith /ood Practice
8onitoring o, xecuti'e 8anage"ent
Register o, Interests
*o""ittee and .oard Crganisation and Ad"inistration
egal C,,ice
Financial Regulations
Policies and Procedures
*o"pliance (ith Funding *ouncil 8e"orandu"
Fraud Policy
1histleblo(ing
Ris 8anage"ent
, *
8/10/2019 Sample Strategic IA Plan
24/34
Strategic Internal Audit Plan 2002-2005
Application So,t(are
Technology In,rastructure
Syste"s :e'elop"ent 8ethodologies
Syste"s Installation Accreditation
*hange 8anage"ent
7uip"ent Ac7uisition
Installation Re'ie(
"S'"& elivery and SupportPer,or"ance *apacity Planning
Ser'ice *ontinuity
7uip"ent 8aintenance
Syste"s Security
Access *ontrol
)ser ducation Training
IT *usto"er Support
*on,iguration 8anage"ent
Proble" 8anage"ent
:atabase 8anage"ent
8/10/2019 Sample Strategic IA Plan
25/34
Strategic Internal Audit Plan 2002-2005
Space 8anage"ent Ti"etabling
RentRateseases
nergy )tilities 8anage"ent
*ar Paring
8inor 1ors
8aintenance o, Pre"ises
Ser'ices 8aintenance
"ergency Procedures
Stores
/rounds 8aintenance
Capital ProectsPro&ect Planning :esign Appraisal
Pro&ect *ontrol
*apital *ontracts
*apital Financing *harges
Asset *anagementAc7uisition
Accounting
8/10/2019 Sample Strategic IA Plan
26/34
Strategic Internal Audit Plan 2002-2005
Finance "ncomeFunding *ouncil /rants Access Funds other /rants
ndo("ents Trust Funds
Research /rants
uropean )nion and SF /rants
*ontracts *onsultancy C'erhead Reco'ery
Tuition Fees
Acco""odation Fees
Finance e/torsPolicy 8anage"ent
*redit 8anage"ent
Student :ebtors
Sundry :ebtors
:ebt Accounting *ollection
:ebt Re'ie( 1rite o,,
Finance penditurePay"ents to suppliers
Rei"burse"ent o, xpenses
8/10/2019 Sample Strategic IA Plan
27/34
Strategic Internal Audit Plan 2002-2005
Financial 8anage"ent In,or"ation Syste"s
.udget Preparation
.udgetary *ontrol Forecasting
xternal Returns and *erti,ication
Finance Financial AccountingAccounting Policy /eneral edger Cperations
Eournal Trans,ers Internal In'oices
Suspense *ontrol Accounts
Finance (t#erInsurance
Tax 8anage"ent
GAT Accounting and 8anage"ent
Personnel and Payroll
Crganisation 8anage"ent
9u"an Resources Strategy
Sta,, Planning *ontrol
Recruit"ent Appoint"ent Induction and Probation
"ploy"ent *ontracts and Eob :escriptions
8/10/2019 Sample Strategic IA Plan
28/34
Strategic Internal Audit Plan 2002-2005
Part-ti"e Gisiting ecturers
Pensions Ad"inistration
Support ServicesSecurity
*aretaing Portering
*leaning
Teleco""unications
*entral Filing and Archi'es 8anage"ent
Postal Ser'ices
Gehicle Fleet 8anage"ent
Reprographics
Audio Gisual Ser'ices
:ay ursery
Photographic Illustration
Academic SystemsTeaching Duality Assurance Arrange"ents
Research Assess"ent xercise
*urriculu" Planning and :e'elop"ent
8/10/2019 Sample Strategic IA Plan
29/34
Strategic Internal Audit Plan 2002-2005
Registry Archi'e 8anage"ent
Galidation o, Cther Institutions
9SA Returns
8anage"ent In,or"ation and Statistics
*ourses :atabase
9ealth1el,are*ounselling
*areers C,,ice
epartmental'Sc#ool AuditsStrategic Planning
.udgeting
Research /rant Pro&ect 8anage"ent
Short *ourses and Su""er Schools
Field *ourses and Cther Gisits
Residences8anage"ent o, 9alls 9ead Tenancies *atering
Roo" Allocations Cccupancy Rates
Receipt Return o, :eposits
CateringStrategy 8anage"ent *ontrol
8/10/2019 Sample Strategic IA Plan
30/34
Strategic Internal Audit Plan 2002-2005
8areting and Pro"otion
Public Relations
International iaison
Schools *olleges iaison
Students5 Union/o'ernance and 8anage"ent
.ar 8anage"ent
'ent 8anage"ent/eneral Funds
Shop
Sportsgrounds'Sports Centre8anage"ent
Inco"e and *ost Reco'ery
nvironmentalPolicy 8anage"ent
:isposal o, (aste
8/10/2019 Sample Strategic IA Plan
31/34
Strategic Internal Audit Plan 2002-2005
1. Anne: C ; Anal*'$' of S*'em' an# R$',
An assess"ent (as carried out by Internal Audit o, the ey riss that apply to each syste" identi,ied in as operating in )1*# ach o,those (as then assessed as to their o'erall ris to )1*# The ey dri'er ,or "aing this assess"ent (as the ris pro,ile produced byP8/# It also considered the length o, ti"e since internal audit last reported in that area and the opinion gi'en at that ti"e and internal
audit+s no(ledge o, each syste" and any strengths (eanesses opportunities or threats that (e are a(are o, a,,ecting those syste"sboth internal and external to the )ni'ersity *ollege#
Ris le'els (ere graded bet(een ! and > (ith ! representing o( ris representing 8ediu" ris 6 as 9igh Ris and > as *ritical Ris#
A ,ull docu"ent o, this process is a'ailable ,ro" Internal Audit#
ach o, these syste"s (as then "apped to a proposed Internal Audit# The ,ollo(ing sho(s the co'erage o, syste"s and riss ,or eachproposed Audit#
S*'em an# R$', Co=e!a)e
A"#$ Toal R$',Co=e!a)e
N"m>e! ofS*'em'
Co=e!e#
A=e!a)eR$', of
S*'em'
B$)(e'R$',
S*'em
In%l"#e $nA"#$ Plan
La'Re=$ee#
Noe'
Student Records Replace"ent Re'ie( J
Sales and 8areting J 2002
*orporate Planning J 200!
Acade"ic Standards J
Student Records J 2000
Procure"ent and :e'elop"ent o,In,or"ation Syste"s
J 2002
*on,erence 8anage"ent J
*ontingency Planning J
IPR J
9u"an Resources J 200!
Friday !3 Septe"ber 2002 3!
8/10/2019 Sample Strategic IA Plan
32/34
Strategic Internal Audit Plan 2002-2005
A"#$ Toal R$',Co=e!a)e
N"m>e! ofS*'em'Co=e!e#
A=e!a)eR$', of
S*'em'
B$)(e'R$',
S*'em
In%l"#e $nA"#$ Plan
La'Re=$ee#
Noe'
Installation J 200!
states Strategy J 200!
xternal A,,airs and PR N 2002 Incorporate into Sales and8areting
Franchising J
Cperating Syste"s J
Resource 8anage"ent J 2000
Ris 8anage"ent J 2002
Sports *entre J 200!
*orporate /o'ernance J 200! Includes co'erage o, the 9ighest
ris identi,ied by P8/ H/o'ern"ent Policy
P* *ontrols J 2002
IT Cperations J 200!
Finance 8anage"ent Accounts J 2002 Also co'ered by *ore Syste"s
et(ors J 200!
Research J
.uilding and /rounds 8aintenance J 2002
*apital 1ors J 200!
Acco"odation Ser'ices J
Finance Asset 8anage"ent J 2002 Also co'ered by *ore Syste"s
earning Resources J
Friday !3 Septe"ber 2002 32
8/10/2019 Sample Strategic IA Plan
33/34
Strategic Internal Audit Plan 2002-2005
A"#$ Toal R$',Co=e!a)e
N"m>e! ofS*'em'Co=e!e#
A=e!a)eR$', of
S*'em'
B$)(e'R$',
S*'em
In%l"#e $nA"#$ Plan
La'Re=$ee#
Noe'
*atering J 2002 Finance ele"ent co'ered by *oreSyste"s
Finance Payroll J 2002 Also co'ered by *ore Syste"s
uropean Funding J 2002
Finance Financial Accounting J 2002 Also co'ered by *ore Syste"s
Finance Treasury 8anage"ent J 2002 Also co'ered by *ore Syste"s
Finance Procure"ent J 2002 Also co'ered by *ore Syste"s
Finance Inco"e J 2002 Also co'ered by *ore Syste"s
Finance *ash and .an J 2002 Also co'ered by *ore Syste"s
Finance Cther J 2002 Also co'ered by *ore Syste"s
9ealth and Sa,ety J
Students )nion N 200! Financial controls included (ithin*ore Syste"s
Finance *rediors J 2002 Also co'ered by *ore Syste"s
Finance :ebtors J 2002 Also co'ered by *ore Syste"s
Follo(-)p o, *leaning Ser'ices Re'ie( J 2002
Included in *ore Syste"s J Annual
Ksyste"s not co'ered by an auditL3 :ecision "ade not to co'er due tothe relati'ely lo( ris represented
3Support Ser'ices - Postal Ser'ices Gehicle Fleet 8anage"ent Reprographics Audio Gisual Ser'ices :ay ursery Photographic Illustration#Student Ser'ices - /raduation *ere"onies 9ealth1el,are*ounseling *areers C,,ice
Friday !3 Septe"ber 2002 33
8/10/2019 Sample Strategic IA Plan
34/34
Strategic Internal Audit Plan 2002-2005
A"#$ Toal R$',Co=e!a)e
N"m>e! ofS*'em'Co=e!e#
A=e!a)eR$', of
S*'em'
B$)(e'R$',
S*'em
In%l"#e $nA"#$ Plan
La'Re=$ee#
Noe'
by these syste"s#
Friday !3 Septe"ber 2002 3