A reporting requirement was first adopted by the Kansas Board of Regents in October 1996. Answer Annually, the Director of Internal Audit prepares an audit plan for the university. There are several factors that go into determining what operations should be included in the audit plan. Input from the President, vice presidents, and other senior administrators identifies several potential audit areas. The Director of Internal Audit will assess these and additional potential audits from the audit universe and then identify those with the greatest level of risk.
Risks can pertain to internal or external factors.
Personnel changes New or revamped information systems Changes in management responsibilities New or changed educational or research programs Consideration is also given to whether the operation has been audited before, how long it has been since its previous audit, and whether past audit observations warrant a follow-up audit. Due to external factors, some operations receive an annual internal audit. Other operations may be audited less than every five years. Eventually, we want to visit as many operations as possible. After these factors are considered, the audit plan is submitted to the President's Executive Council for review.