Internal Audit

Basis for Policy

The University of Nebraska Medical Center (UNMC) shall comply with all applicable federal, state and local laws and regulations and University of Nebraska and UNMC Policies and Procedures.

Internal Audit Structure

The mission of the internal audit activity is to provide independent, objective assurance and consulting services designed to add value and improve the UNMC’s operations. It helps UNMC accomplish its objectives by bringing a systematic, disciplined approach to evaluate and improve the effectiveness of risk management, control, and governance processes.

The scope of work of the internal audit activity is to determine whether UNMC’s network of risk management, control and governance processes, as designed and represented by management, is adequate and functioning in a manner to ensure:

Risks are appropriately identified and managed.
Interaction with the various governance groups occurs as needed.
Significant financial, managerial and operating information is accurate, reliable, and timely.
Employees’ actions are in compliance with policies, standards, procedures, and applicable laws and regulations.
Resources are acquired economically, used efficiently and adequately protected.
Programs, plans, and objectives are achieved.
Quality and continuous improvement are fostered in UNMC’s control process.
Significant legislative or regulatory issues impacting UNMC are recognized and addressed appropriately.
Opportunities for improving management control, profitability, and UNMC’s image may be identified during audits. They will be communicated to the appropriate level of management.

Accountability

The Internal Audit Director, shall be accountable to the Chancellor and provide information, on request for the chief audit executive, to be presented at the Audit, Risk and Compliance Committee including:

Provide annually an assessment on the adequacy and effectiveness of the campus processes for controlling its activities and managing its risks in the areas set forth under the mission and scope of work.
Report significant issues related to the processes for controlling the activities of the campus and its affiliates, including potential improvements to those processes, and provide information concerning such issues through resolution.
Periodically provide information on the status and results of the annual audit plan and the sufficiency of activity resources.
Coordinate with other control and monitoring functions (risk management, compliance, security, legal, ethics, environmental, external audit) to conduct risk assessments and develop or recommend monitoring activities to evaluate the adequacy and effectiveness of internal controls.

Responsibility

Develop a flexible annual audit plan using an appropriate risk-based methodology, including any risks or control concerns identified by management, and submit that plan to the Chancellor for review and approval as well as periodic updates. The Plan shall be presented to the Audit, Risk and Compliance Committee annually.
Implement the annual audit plan, as approved, including as appropriate, any special tasks or projects requested by management and the Audit, Risk and Compliance Committee.
Maintain a professional audit staff with sufficient knowledge, skills, experience, and professional certifications to meet the requirements of this Charter.
Evaluate and assess significant merging/consolidating functions and new or changing services, processes, operations, and control processes coincident with their development, implementation, and/or expansion.
Issue periodic reports to the chief audit executive and management summarizing results of audit activities.
Keep the chief audit executive informed of emerging trends and significant issues, as it relates to their campus.
Provide a list of significant measurement goals and results to the chief audit executive.
Assist in the investigation of significant suspected fraudulent activities within their campus and notify management and the chief audit executive of the results.
Consider the scope of work of UNMC-selected external auditors for the purpose of providing optimal audit coverage to UNMC at a reasonable overall cost.

Independence

To provide for the independence of the internal auditing activity, administration’s personnel report to the chief audit executive, who reports functionally to the Audit, Risk and Compliance Committee and administratively to the President in a manner outlined in the above section on Accountability. The chief audit executive will include as part of the annual report to the Audit, Risk and Compliance Committee a section on internal audit personnel.

The campus directors will report to their campus Chancellor and provide information to the chief audit executive as outlined in the above section on Accountability.

Standards of Audit Practice

The internal audit activity will meet or exceed the International Standards for the Professional Practice of Internal Auditing and Code of Ethics of The Institute of Internal Auditors.

Additional Information

Contact the Director, Internal Audit, 402-559-5824
UNMC Policy No. 8000, Compliance Program
Institute of Internal Auditors

This page maintained by dkp.