Internal controls are effected by people. They are not just policy manuals and forms, but people functioning at every level of the institution. Internal controls are geared to achieving objectives in numerous overlapping categories. Internal controls can be expected to provide only reasonable assurance regarding achieving operational, financial reporting, and compliance objectives. Roles and Responsibility Every faculty and staff member has some responsibility for internal control, because all employees have some role in effecting control by their actions.
Any weak link can cause an internal control system to fail.
In addition, everyone has a responsibility to communicate, through appropriate channels, problems, deviations from established standards, and violations of policy, regulation, or law. Management is ultimately responsible and must assume ownership of the internal control systems within their areas of responsibility. The president shapes the values, principles, and major operating policies that form the foundation for UT-Houston's internal control systems. Senior administrators provide direction in the major functional areas for evaluating objectives, risks, and the associated internal controls. Deans and department heads are responsible for designing and implementing internal control systems at detailed levels.