Source: https://policies.tbr.edu/policies/preventing-and-reporting-fraud-waste-or-abuse
Timestamp: 2019-04-26 04:33:50+00:00

Document:
Theft, misappropriation, misapplication, destruction, removal, or concealment of any institutional assets or resources, including but not limited to funds, securities, supplies, equipment, real property, intellectual property or data.
Improper use or assignment of any institutional assets or resources, including but not limited to personnel, services or property.
Improper handling or reporting of financial transactions, including use, acquisitions and divestiture of state property, both real and personal.
Inappropriate or unauthorized use, alteration or manipulation of data, computer files, equipment, software, networks, or systems, including personal or private business use, hacking and software piracy.
Forgery or unauthorized alteration of documents.
Pursuit of a personal benefit or advantage in violation of the TBR Conflict of Interest Policy.
Concealment or misrepresentation of events or data.
Acceptance of bribes, kickbacks or any gift, rebate, money or anything of value whatsoever, or any promise, obligation or contract for future reward, compensation, property or item of value, including intellectual property.
Waste - Waste involves behavior that is deficient or improper when compared with behavior that a prudent person would consider a reasonable and necessary business practice given the facts and circumstances. Waste is a thoughtless or careless act, resulting in the expenditure, consumption, mismanagement, use, or squandering of institutional assets or resources to the detriment or potential detriment of the institution. Waste may also result from incurring unnecessary expenses due to inefficient or ineffective practices, systems, or controls. Waste does not necessarily involve fraud, violation of laws, regulations, or provisions of a contract or grant agreement.
Management is responsible for maintaining a work environment that promotes ethical and honest behavior on the part of all employees, students, contractors, vendors and others.
To do so, management at all levels must behave ethically and communicate to employees and others that they are expected to behave ethically.
Management must demonstrate through words and actions that unethical behavior will not be tolerated.
Management of each TBR institution has the responsibility to establish and implement internal control systems and procedures to prevent and detect irregularities, including fraud, waste and abuse.
Compliance with laws, regulations, contracts, grants and policies.
Review the operational processes of the unit under consideration.
Determine the potential risk of fraud, waste, or abuse inherent in each process.
Identify the controls included in the process (or controls that could be included) that result in a reduction in the inherent risk.
Assess whether there are internal controls that need to be improved or added to the process under consideration.
Implement controls or improve existing controls that are determined to be the most efficient and effective for decreasing the risk of fraud, waste or abuse.
Adequate separation of duties among employees.
Sufficient physical safeguards over cash, supplies, equipment and other resources.
Independent validation of transactions for accuracy and completeness.
Documented supervisory review and approval of transactions or other activities.
Proper supervision of employees, processes, projects or other operational functions.
Audits or other independent reviews may be performed on various components of the internal control systems.
Internal Audit is responsible for assessing the adequacy and effectiveness of internal controls that are implemented by management and will often recommend control improvements as a result of this assessment.
During an audit of a department or process, Internal Audit will also perform tests designed to detect fraud, waste or abuse that may have occurred.
The Tennessee Department of Audit, Division of State Audit, performs periodic financial audits of Tennessee Board of Regents institutions.
One purpose of this type audit is to evaluate an institution’s internal controls, which will often result in recommendations for control improvements.
State Audit will also perform tests designed to detect fraud, waste or abuse that may have occurred.
Various programs may be subject to audits or reviews by federal, state or other outside agencies based on the type of program, function or funding.
Although audits and reviews may include assessments of internal controls, the primary responsibility for prevention and detection of fraud, waste or abuse belongs to management.
Therefore, management should take steps to review internal controls whether or not audits are to be performed.
Any official of any agency of the state having knowledge that a theft, forgery, credit card fraud, or any other act of unlawful or unauthorized taking, or abuse of, public money, property, or services, or other shortages of public funds has occurred shall report the information immediately to the office of the Comptroller of the Treasury (T.C.A. § 8-19-501(a)), To ensure compliance with this statute, the Tennessee Board of Regents system office provides a means for institutional employees and others to report such matters, which are subsequently reported to the Comptroller's Office.
Institutional administration with knowledge of fraud, waste or abuse will report such incidents immediately.
Others, including institutional management, faculty and staff with a reasonable basis for believing that fraud, waste or abuse has occurred are strongly encouraged to immediately report such incidents (T.C.A. § 8-50-116).
Students, citizens and others are also encouraged to report known or suspected acts of fraud, waste or abuse.
Although proof of an improper activity is not required at the time the incident is reported, anyone reporting such actions must have reasonable grounds for doing so.
Employees with knowledge of matters constituting fraud, waste or abuse, that fail to report it or employees who knowingly make false accusations may be subject to disciplinary action.
State law (T.C.A. § 8-50-116) prohibits discrimination or retaliation against employees for reporting allegations of dishonest acts or cooperating with auditors conducting an investigation.
The Higher Education Accountability Act of 2004 directs that a person who knowingly and willingly retaliates or takes adverse action of any kind against any person for reporting alleged wrongdoing pursuant to the provisions of this part commits a Class A misdemeanor.
According to T.C.A. § 49-14-103, detailed information received pursuant to a report of fraud, waste or abuse or any on-going investigation thereof shall be considered working papers of the internal auditor and shall be confidential.
Although every attempt will be made to keep information confidential, circumstances such as an order of a court or subpoena may result in disclosure.
Also, if TBR or one of its institutions has a separate legal obligation to investigate the complaint (e.g. complaints of illegal harassment or discrimination), TBR and its institutions cannot ensure anonymity or complete confidentiality.
the Tennessee Comptroller of the Treasury’s Hotline for fraud, waste and abuse at 1-800-232-5454.
If the incident involves their immediate supervisor, the employee should report the incident to the next highest-level supervisor or one of the officials or offices listed above. Employees should not confront the suspected individual or initiate an investigation on their own since such actions could compromise the investigation.
President/Vice President for Business and Finance, or designee.
The President/Vice President or designee receiving such notice will immediately notify the TBR Vice Chancellor for Business and Finance and the System-wide Chief Audit Executive regarding the acknowledged or suspected fraud or misconduct.
The System-wide Chief Audit Executive will notify the Comptroller of the Treasury of instances of fraud, waste or abuse.
After initial notification, each institution should refer to TBR Guideline B-080, Reporting and Resolution of Institutional Losses, for additional reporting procedures.
Individuals involved with suspected fraud, waste or abuse should assist with and cooperate in any authorized investigation, including providing complete, factual responses to questions and either providing access to or turning over relevant documentation immediately upon request by any authorized person.
The refusal by an employee to provide such assistance may result in disciplinary action.
The Tennessee Board of Regents will evaluate the information provided and make a determination concerning external reporting obligations, if any, and the feasibility of pursuing available legal remedies against persons or entities involved in fraud, waste or abuse against the institution.
forwarding information regarding the suspected fraud to appropriate external authorities for criminal prosecution.
In those cases where disciplinary action is warranted, the Office of Personnel/Human Resources, Office of General Counsel, and other appropriate offices shall be consulted prior to taking such action, and applicable institutional and Board policies related to imposition of employee discipline shall be observed.
An employee suspected of gross misconduct may not resign as an alternative to discharge after the investigation has been completed.
Exceptions to this requirement can only be made by the institution’s President, and require advance consultation with and approval by the Vice Chancellor for Business and Finance.
If the employee resigns during the investigation, the employment records must reflect the situation as of the date of the resignation and the outcome of the investigation (General Personnel Policy, 5:01:00:00).
An employee who is dismissed for gross misconduct or who resigns or retires to avoid dismissal for gross misconduct shall not be entitled to any payment for accrued but unused annual leave at the time of dismissal (Annual Leave Policy, 5:01:01:01; T.C.A. § 8-50-807).
Students found to have participated in fraud, waste or abuse as defined by this guideline will be subject to disciplinary action pursuant to the TBR Policy 3:02:00:01, General Regulations on Student Conduct and Disciplinary Sanctions.
The Dean of Students/Vice President of Student Affairs/TCAT President, or designee, will be responsible for adhering to applicable due process procedures and administering appropriate disciplinary action.
All investigations will be conducted in as strict confidence as possible, with information sharing limited to persons on a “need to know” basis.
The identities of persons communicating information or otherwise involved in an investigation or allegation of fraud, waste or abuse will not be revealed beyond the institution and staff of the TBR Offices of General Counsel, Business and Finance and System-wide Internal Audit unless necessary to comply with federal or state law, or if legal action is taken.
Administrators at all levels of management must implement, maintain, and evaluate an effective compliance program to prevent and detect fraud, waste and abuse.
Once such activities have been identified and reported, the overall resolution should include an assessment of how it occurred, an evaluation of what could prevent recurrences of the same or similar conduct, and implementation of appropriate controls, if needed.
T.C.A. § 49-8-203; All Federal and State statutes, codes, acts, rules and regulations referenced in this policy.
TBR Board Meeting, March 28, 2008; TBR Board Meeting, December 8, 2011; TBR Board Meeting, March 27, 2015.

References: § 8
 § 8
 § 8
 § 49
 § 8
 § 49