How does Internal Audit decide what work to do?
Audit projects are selected based on a formal risk-based planning process aligned with the University’s enterprise-wide risk management process. An assessment is performed to identify the areas/systems/processes within the University have higher relative inherent risk to the achievement of institutional objectives. This is a consultative process and opinions are sought from senior administrators and others in the University. The Board Audit Committee approves the projects. The process is designed to ensure audit resources are allocated to areas where a review would benefit the University.
