Sample Strategic IA Plan

8/10/2019 Sample Strategic IA Plan

1/34

Internal Audit Assurance Strategy and Plans 2002-2005

Name

INTERNAL AUDIT SERVICES

NAME INTERNAL AUDIT ASSURANCE STRATEGY AND PLANS

2002-2005

INDEX

1. Role of Ine!nal A"#$ 1

2. In!o#"%$on an# P"!&o'e of ($' S!ae)* 1

+. A%,nole#)emen' 1

. A"#$ A&&!oa%( 2

5. A"#$ /o!,$n) P!o%e#"!e' an# P!a%$%e' +

The Audit Toolbox 3

Audit Reporting 5

. Ine!nal A"#$ A''$'an%e $n U/CN R$', Mana)emen 5

ee Ea!n$n) /o!, 5


2/34

ee Ea!n$n) /o!, 5


1. Role of Ine!nal A"#$

!#!# Internal Audit $IAS% is an independent and ob&ecti'e appraisal ser'ice (ithinthe )ni'ersity *ollege#

!#2# Internal audit+s pri"ary role is to pro'ide an opinion to the Principal and*hie, xecuti'e and to the .oard o, /o'ernors 'ia the Audit *o""ittee onris "anage"ent control and go'ernance by "easuring and e'aluatingthe e,,ecti'eness o, these controls and syste"s in achie'ing )1*+sagreed ob&ecti'es#

!#3# In addition internal audit pro'ides assurance to "anage"ent on syste"s

that they are responsible ,or and assist "anage"ent in "aingi"pro'e"ents to these syste"s#

!## Ris "anage"ent control and go'ernance co"prise the policiesprocedures and operations established to ensure4

the achie'e"ent o, ob&ecti'es

the appropriate assess"ent o, ris

the reliability o, internal and external reporting and accountability processes

co"pliance (ith applicable la(s and regulations and

co"pliance (ith the beha'ioural and ethical standards set ,or the

organisation#

!#5# Internal audit also pro'ides an independent and ob&ecti'e consultancyser'ice speci,ically to help line "anage"ent i"pro'e the organisation+s ris"anage"ent control and go'ernance# Such consultancy (or contributesto the opinion (hich internal audit pro'ides on ris "anage"ent control

and go'ernance


3/34


. A"#$ A&&!oa%(

R$', Anal*'$'#!# Ris identi,ication and assess"ent belongs to "anage"ent# They not

internal audit are accountable ,or the econo"y e,,iciency and e,,ecti'enesso, ris "anage"ent control and go'ernance# It is there,ore essential thatthe audit strategy is based on "anage"ent+s ris priorities# :uring 200!-02)1* (ith the assistance o, Internal Audit has re'ised its approach to ris"anage"ent# This approach pro'ides )1* (ith a structured"ethodology to identi,y assess and "anage riss to the achie'e"ent o,

their ob&ecti'es##2# Internal Audit (ill see to rely on "anage"ent+s resulting ris analysis and

e'aluation to ,or" the basis ,or this and ,uture plans# In this (ay IAS (ill beable to pro'ide assurance to "anage"ent on the ey riss ,acing )1*as (ell as assist in reducing those riss through its reco""endations#

#3# As (ell as using )1*+s ris assess"ent as the basis ,or its planning IAS(ill undertae additional (or to in,or" its approach# 1e (ill tae accounto, pre'ious assess"ents o, syste"s and processes in )1* the length o,

ti"e since speci,ic syste"s ha'e been re'ie(ed our no(ledge o, thestrengths (eanesses opportunities and threats $both internal andexternal% and other sources o, assurance such as external audit#

## IAS (ill ha'e to conduct an annual re'ie( o, )1*+s ris "anage"entprocess to ensure that it can continue to place reliance on "anage"ent+sris assess"ent as the basis ,or audit planning#

#5# IAS (ill re'ie( its plans annually to tae account o, re'isions in )1*+s risassess"ent enable ne( de'elop"ents to be taen into account and allo(,or the plan to be rolled ,or(ard appropriately


4/34


*hanging processes are risier than those that are (ell established and (ill

re7uire increased audit co'erage

The extent to (hich IAS (ill rely on the (or carried out by others such as our

xternal Auditors

Ad'ice (or carried out by IAS can contribute to the o'erall assurance

pro'ided#

#># Audit co'erage (ill be achie'ed by a co"bination o, strategic andoperational audits# Strategic audits (ill ,ocus on the extent to (hich ris"anage"ent control and go'ernance arrange"ents are (ell directed

(hilst operational audits (ill co'er the extent to (hich these arrange"entsare (oring in practice#

#?# The audit approach and strategy are based on the ,ollo(ing ele"ents4

A three year audit cycle

Audits at an operational le'el to be conducted o'er the audit cycle

Audit co'erage (ill address the range o, riss that )1* identi,ied as


5/34


Application *ertain high ris syste"s thatha'e been sub&ect to a ,ull syste" re'ie(

during the period and (here co"pliance,ailures (ould "aterially a,,ect )1*+s ris"anage"ent control and go'ernancearrange"ents#

5#5#


6/34


A"#$ Re&o!$n)A''$)nmen Le=el

5#?# IAS (ill prepare a (ritten report su""arising audit co'erage ,indingsreco""endations ,or i"pro'e"ents in control $(here appropriate% and ano'erall audit opinion on the syste" re'ie(ed#

6!)an$'a$onal Le=el

5#!0# IAS (ill prepare regular progress reports to the Audit *o""ittee ti"ed to

co-incide (ith the progra""e o, co""ittee "eetings#5#!!# The Internal Audit 8anager (ill prepare an Annual Report su""arising

audit acti'ity throughout the year and setting out his o'erall opinion on)1*+s ris "anage"ent control and go'ernance arrange"ents#

?"al$* A''"!an%e

San#a!#'

5#!2# IAS sta,, (ill be re7uired to conduct all audit acti'ity in accordance (ith thepro,essional and ethical standards set out in the /o'ern"ent Internal AuditStandards and 9F*1 Audit *ode o, Practice# The )1* Internal Audit*harter and 8anual ha'e been (ritten to "eet these standards and (ill beupdated and "aintained to re,lect any ,uture changes to the standards#

Pe!fo!man%e Mea'"!e' an# In#$%ao!'

5#!3# IAS has set out proposals to introduce a range o, per,or"ance "easuresand indicators in its *harter#

. Ine!nal A"#$ A''$'an%e $n U/CN R$', Mana)emen

6 ! I t l A dit h b l l i l d i th i d l h ,


7/34


to identi,y ,urther ,ee earning opportunities to supple"ent the (or at the

Asse"bly concentrating (here possible on higher ,ee earning areas such

as Ris 8anage"ent training and consultancy# This (ill include "aing,urther contact (ith local 9I+s as (ell as exploring spin o,, (or ,ro" there'ie(s carried out at the ational Asse"bly ,or 1ales#

;## It is anticipated that the ne( Internal Auditor (ho taes up her post inSepte"ber 2002 (ill pro'ide little ,ee earning (or in the ,irst year as shede'elops her internal audit sills and experience and de'elops her roleinternal to )1*# 9o(e'er it is anticipated to "ae greater use o, her inthis role in the ,uture and this is re,lected in the detailed plan#

;#5# At all ti"es the priority o, IAS (ill be the co"pletion o, the )1* internalaudit plan to allo( us to pro'ide ade7uate assurance to the Principal and.oard o, /o'ernors on the ,ra"e(or o, control#

3. L$n,' To In'$"e of Ine!nal A"#$o!' 4IIA an# 6(e!7o#$e'

>#!# The Internal Audit 8anager has taen on acti'e roles (ithin the Institute o,Internal Auditors )B and Ireland by sitting on the 8areting *o""ittee o,

the ational body and on the South 1est Regional *o""ittee# Thisbene,its )1* by raising its pro,ile by ensuring that IAS are a(are o, thelatest changes in internal audit and ris "anage"ent by in,luencing thede'elop"ent o, the pro,ession and "aing lins (ith other 9eads o, InternalAudit allo(ing the sharing o, in,or"ation and de'eloping sales leads#

>#2# IAS are also a corporate "e"ber o, the *ouncil o, 9igher ducationInternal Auditors# This is a specialist group a,,iliated to the IIA# IAS attendstheir 7uarterly "eetings and this again bene,its )1* as stated abo'e#

> 3 Th i l d i th ti iti i i l i t th ti


8/34


!0#!# stablished internal audit practice had been to re'ie( all "a&or syste"s(ithin an organisation at least once o'er a ,ixed planning cycle usually 3 to

5 years# In accordance (ith this IAS practice had been to agree a threeyear audit cycle (ith )1* based on a detailed audit needs assess"ent#9o(e'er ongoing de'elop"ents in the approach to *orporate /o'ernance(ithin the public sector coupled (ith de'elop"ents in the internal auditpro,ession ha'e resulted in organisations and internal audit practitionersre'ie(ing their approach to planning and ris assess"ent#

!0#2# IAS plans ,or 2002-03 re,lect this changing en'iron"ent# IAS agreed toassist on a consultancy basis in re'ie(ing and i"ple"enting a ris

"anage"ent ,ra"e(or in )1* (hich it (as agreed (ould also ,or" thebasis ,or IAS+s audit assurance strategy#

!0#3# This consultancy (or (ill in,or" the Internal Audit 8anager+s annualopinion on the organisation+s ris "anage"ent control and go'ernancearrange"ents#

!0## The ,ollo(ing is IAS planned (or ,or 200203# The plan states the na"eand description o, the area o, (or and its planned ti"ing# It also states itsrelati'e priority# In the e'ent that IAS ,all behind in the co"pletion o, the

plan due to un,oreseen e'ents additional (or or syste"s pro'ing "oreco"plex than originally assessed the lo( priority assign"ents (ill be"o'ed to the ,ollo(ing year# The priority is set based on the relati'e ris o,the syste"s under re'ie( as described in Annex *#

Planne# Re=$e' 200290+9P!$o!$*

De'%!$&$on Planne#

T$m$n)


9/34


5# Finance Debtors

Priority 2

As stated in the StrategicPlan#

Re'ie( to beconducted in

o'e"ber and:ece"ber 2002# Toco"plete in Eanuary2003#

6# Follow-Up of Cleaning ServicesReview

Priority 3


Cctober 2002

;# uropean FundingPriority 2

Planned assistance to*o""unity )ni'ersity o, theGalleys pro&ect to ,acilitate asel, assess"ent o, theiroperating procedures#

Cctober 02

># Academic Standards

Priority 1


Cctobero'e"ber 02

?# Corporate !overnancePriority 1

As stated in the StrategicPlan# o'e"ber:ece"ber02

!0# "ntellectual Property Rig#ts

Priority 2


EanuaryFebruary 03

!!# Contingency Planning

Priority 2


EanuaryFebruary 03

!2 $ lt# d S f t A t t d i th St t i 8 h 03


10/34


Priority 3 Plan# the year#

20# &raining and evelopment

Priority 2


Cn-going throughoutthe year#

DI*A exa" in Eune2003#

2!# U,C+ Ris) *anagement

Priority 2


Cn-going throughoutthe year#

22# Recommendation Follow Up

Priority 1

Tracing and ,ollo( up o,

reco""endations issued byInternal Audit#

Duarterly#

23# Annual Planning and Reporting

Priority 1


EulyAugust 2003

2# Advice. Follow up andContingency

Priority to /e decided on a per

case /asis


As it occurs#


11/34


11. S!ae)$% Plan 2002905

In!o#"%$on!!#!# The basis ,or the de'elop"ent o, this plan (ere the riss identi,ied by

)1* as part o, its ris "anage"ent process and the "apping o, thoseriss to )1*+s syste"s# Annex A sho(s the ey riss!identi,ied by )1*and Annex . is a breado(n o, the syste"s that exist (ithin )1*#

!!#2# The resulting tables identi,y our planned audit co'erage ,or the period 2002-05# Achie'e"ent o, this plan (ill ,ocus on )1*+s identi,ied ris priorities(hilst ensuring a su,,icient body o, (or across the ,ull range o, )1*+s

operations# Although planned audits ha'e been "apped to )1*+s eyriss the audit areas sub&ect to re'ie( (ill also pro'ide assurance on a (iderange o, non-ey riss# Table ! details our proposed audit co'erage o'erthe period o, the plan and Table 2 "aps this co'erage to )1*+s eyriss as identi,ied by the 8anage"ent .oard#

!!#3# 1e ha'e prioritised audit co'erage based on the a"ount o, ris thesyste"s represent to )1* IAS+s opinion on the stability o, the syste"and the length o, ti"e since it (as last re'ie(ed# The relati'e priority o, the

audits (ill change during the li,e o, this plan as the rele'ant riss changeare "anaged by )1* and IAS con,idence in the "anage"ent o, thosesyste"s increases ,ollo(ing re'ie(# Annex * gi'es a su""ary o, the rissco'ered by each suggested audit# Further detail on the analysis carried outto reach this conclusion is a'ailable ,ro" Internal Audit#

!!## The audits per,or"ed (ill consider the speci,ic riss identi,ied by the ris"anage"ent process in addition to pro'iding o'erall assurance on thesyste"#

!! 5 Th l h b d d th ti th t th ill b , ll ti


12/34


Ta>le 1@ S%(e#"le of A"#$ Co=e!a)e 2002-05

A"#$ Da*'

P!$o!$* Planne# A"#$'9 Le=el of R$',R$', Co=e!a)e

De'%!$&$on Yea! 1 Yea! 2 Yea! +

1. Academic Standards Full re'ie( o, the controls operating that ensure that the courses and lecturing

pro'ided by oursel'es and ,ranchises are o, opti"u" 7uality#

30 0 0

2# Accommodation Services Full re'ie( o, the controls that ensure that acco""odation pro'ided students andothers are o, su,,icient 7uality#

0 25 0

3# Annual Review of CoreSystems

*o"pliance and substanti'e testing to con,ir" the continuing operation o, eycontrols operating o'er the core syste"s#

This re'ie( (ill be carried out annually and (ill incorporate the use o, datainterrogation as (ell as "anual checs#

The re'ie(s (ill pro'ide "anage"ent (ith assurance that the ey controls (ithinthe core ,inancial syste"s continue to operate e,,ecti'ely#

Additional days allocated in the ,irst year to carry out a re'ie( o, the auditapproach to this area and to incorporate the use o, data interrogation#

30 25 25

# Full Review of Core Systems :uring the 3 year li,e cycle o, the plan each o, the *ore Financial Syste"s (ill besub&ect to ,ull internal audit re'ie( in addition to the testing ,ocussed annualre'ie(#

The re'ie(s (ill pro'ide "anage"ent (ith an in depth assurance o, the e,,iciencyand e,,ecti'eness o, the *ore Financial Syste"s#

0 0 0

Finance Asset Management Full re'ie( o, the controls that ensure that assets are e,,ecti'ely and securelyheld used and disposed o, (ith su,,icient co"plete and accurate in,or"ationa'ailable ,or incorporation into the ,inancial accounts#

5 0 0

Finance Cash and Bank Full re'ie( o, the controls that ensure that cash and ban accounts held by)1* are held and used e,,ecti'ely and securely#

5 0 0

Finance Debtors Full re'ie( o, the controls that ensure that credit control is (oring e,,ecti'ely anddebts are identi,ied and pro"ptly resol'ed#

5 0 0

Finance Creditors Full re'ie( o, the controls that ensure that pay"ents to )1*+s creditors areaccurate and ti"ely and that the pay"ent "echanis"s are secure and e,,icient#

0 0 5

Internal Audit Ser'ices


13/34


A"#$ Da*'



Finance Financial Accounting Full re'ie( o, the controls that ensure that )1*+s ,inancial accounts areprepared using accurate co"plete and ti"ely in,or"ation and that appropriateaccounting procedures "ethods and standards are applied#

0 5 0

Finance Income Full re'ie( o, the controls that ensure that ,unds due to )1* are pro"ptly andsecurely collected#

0 0 5

Finance Management Accounts Full re'ie( o, the controls that ensure that )1*s "anage"ent accounts areprepared using accurate co"plete and ti"ely in,or"ation and that subse7uentreports "eet the needs o, )1* and are the"sel'es accurate co"plete andti"ely# Full re'ie( o, the controls operating o'er the corporate and depart"entalbudgeting process to ensure that )1* accurately predicts its ,inancialre7uire"ents sets budgets e,,ecti'ely and ade7uately "anages those budgets#

0 !0 0

Finance Other Full re'ie( o, the controls that ensure that )1*+s insurance tax and GAT areappropriately "anaged#

0 0 5

Finance Payroll Full re'ie( o, the controls that ensure that )1*+s payroll is accurately andsecurely paid to legiti"ate e"ployees#

0 0 5

Finance Procurement Full re'ie( o, the controls that ensure that )1* achie'es 'alue ,or "oney ,ro"its procure"ent o, goods and ser'ices and that the procure"ent process ise,,icient and e,,ecti'e#

0 5 0

Finance Treasury Management Full re'ie( o, the controls that ensure that )1*+s in'est"ents and ,inancingachie'es 'alue ,or "oney and is secure#

0 5 0

5# 0uilding and !rounds*aintenance

Full re'ie( o, the controls that ensure that )1*+s buildings and estates aree,,iciently and e,,ecti'ely "aintained#

0 0 !5

6# Capital ,or)s Full re'ie( o, the controls that ensure that capital pro&ects best "eet )1*+sneeds are planned and executed to budget and ti"e and represent 'alue ,or

"oney#

0 0 25

;# Catering Full re'ie( o, the controls that ensure that )1*+s catering ,acilities "eet theob&ecti'es o, the )ni'ersity *ollege satis,y the expectations o, its custo"ers ando,,ers 'alue ,or "oney#

0 20 0

Friday !3 Septe"ber 2002 !3


14/34


A"#$ Da*'



># Conference *anagement Full re'ie( o, the controls that ensure the use o, con,erence ,acilities is opti"isedand that e'ents are e,,iciently and e,,ecti'ely organised and conducted#

0 20 0

?# Contingency Planning Full re'ie( o, the controls that ensure that )1* is able to 7uicly ande,,ecti'ely continue operations and return to nor"ality in the e'ent o, a disaster#

!0 0 0

!0# Corporate !overnance A ,ull re'ie( o, the *orporate /o'ernance "echanis"s and structures (ill becarried out once during the li,e o, the plan# This (ill be supple"ented (ith annualre'ie(s o, ris "anage"ent#

The re'ie( (ill pro'ide "anage"ent (ith assurance that ey controls operatingo'er the go'ernance and probity o, )1* are e,,ecti'e#

25 0 0

!!# Corporate Planning Full re'ie( o, the controls that ensure that )1* "aes e,,ecti'e corporate andoperational decisions e,,ecti'ely co""unicates its decisions to sta,, and otherstaeholders and is able to tae pro"pt and e,,ecti'e action in light o, changes toits en'iron"ent or 'ariation ,ro" its planned acti'ity#

0 30 0

!2# states Strategy Full re'ie( o, the controls that ensure that the ,uture needs o, )1*+s buildingestate and utilities (ill be "et#

0 0 25

!3# uropean Funding Full re'ie( o, the controls that ensure that )1* "aes opti"u" use o,uropean ,unding and co"plies (ith the re7uire"ents o, that ,unding#

It is also liely that ,urther on-going ad'ice (ill be gi'en in this area#

!5 0 25

!# Follow-Up of CleaningServices Review

i"ited co"pliance testing at the re7uest o, the Audit *o""ittee to gi'eassurance that the reco""endations o, the *leaning Ser'ices re'ie( ha'e beeni"ple"ented#

5 0 0

!5# Franc#ising Full re'ie( o, the controls that ensure that )1* "aes opti"u" use o,,ranchising opportunities in the )B and abroad and that the standards andconduct o, such partner institutions "eets )1* expectations#

30 0 0

!6# $ealt# and Safety Full re'ie( o, the controls that ensure that the health and sa,ety o, )1* sta,,and students is protected as ,ar as is possible and that rele'ant legislation isco"plied (ith#

!5 0 0

Friday !3 Septe"ber 2002 !


15/34


A"#$ Da*'



!;# $uman Resources Full re'ie( o, the controls that ensure that )1* has su,,icient sta,, (ith there7uired sills and experience to "eet its ob&ecti'es#

0 0 25

!># "&'"S - "nstallation Full re'ie( o, the controls that ensure the co"puter syste"s hard(are andinstallation acti'ity operate in a controlled secure and "anaged en'iron"ent#

0 !5 0

!?# "ntellectual Property Rig#ts Full re'ie( o, the controls that ensure that )1*+s intellectual property ise,,ecti'ely exploited and protected#

20 0 0

20# %earning Resources Full re'ie( o, the controls that ensure that students o, )1* ha'e access tosu,,icient learning "aterial and support#

25 0 0

2!# "&'"S - +etwor)s Full re'ie( o, the controls that ensure that )1*+s net(or is e,,ecit'e robustand secure#

0 0 !5

22# "&'"S - (perating Systems Full re'ie( o, the controls that ensure that )1*+s P* operating syste"s aree,,ecti'e robust and secure#

!5 0 0

23# "&'"S - PC Controls Full re'ie( o, the controls that ensure that )1* sta,, and students ha'esu,,icient support and training to carry out their (or ha'e su,,icient hard(areand so,t(are and ha'e an e,,ecti'e robust and secure electronic en'iron"ent in(hich to operate#

0 0 !5

2# "&'"S - Procurement andevelopment of "nformationSystems

Full re'ie( o, the controls that ensure that in,or"ation syste"s and procuredde'eloped by )1* best "eet the needs o, the )ni'ersity *ollege represent'alue ,or "oney and are e,,ecti'ely i"ple"ented#

0 0 20

25# Researc# Full re'ie( o, the controls that ensure that )1* "axi"ises its researchpotential in support o, *orporate Cb&ecti'es#

0 25 0

26# Resource *anagement Full re'ie( o, the controls that ensure that the usage o, )1*+s roo"s isopti"ised and 9F*1 targets "et#

0 25 0

2;# Ris) *anagement An annual re'ie( (ill be "ade o, the ris "anage"ent process to ensure that itcontinues to operate e,,ecti'ely# The re'ie( (ill ,ocus on ensuring that risscontinue to be identi,ied assessed and "anaged throughout )1*#

The re'ie( (ill be supple"ented by a ,ull re'ie( o, *orporate /o'ernance (hich(ill consider the on-going e,,ecti'eness o, the process in "ore detail and in

5 5 !5



16/34


A"#$ Da*'



co"parison to best practice#

The re'ie( (ill pro'ide "anage"ent (ith assurance that the ris "anage"ent

process continues to be robust and to allo( internal audit to place reliance on theris "anage"ent process in pro'iding direction ,or its (or#

2># Sales and *ar)eting andPu/lic Relations

Full re'ie( o, the controls that ensure that )1*+s courses and ,ee earningacti'ities e,,ecti'ely "eet the de"ands o, their respecti'e "arets and areopti"ally priced and pro"oted# Also the controls that ensure that opti"alrelations are "aintained bet(een )1* its staeholders and the public ingeneral#

0 0 25

2?# Sports Centre Full re'ie( o, the controls that ensure that )1*+s sports ,acilities "eet thede"ands o, students sta,, and other custo"ers inco"e le'els are opti"ised andthe health and sa,ety o, sta,, students and other custo"ers is sa,eguarded#

20 0 0

30# Student Records Full re'ie( o, the controls that ensure that student records are accurately andco"pletely captured stored and reported and that access is secure and e,,ecti'e#

0 35 0

3!# Student RecordsReplacement System

Cn-going syste"s de'elop"ent re'ie( to pro'ide assurance that controls areoperating that (ill ensure that the replace"ent student records syste" selects theopti"u" replace"ent that best represents 'alue ,or "oney that syste" (ill bee,,iciently and e,,ecti'ely procured de'eloped and i"ple"ented and ,inancialbudgets and ti"e targets (ill be "et#

20 20 20



17/34


+on-U,C+ Assurance ,or) 0 0 0

32# Fee arning ,or) Ti"e set aside (ill be used to identi,y (in and deli'er ,ee-earning (or on behal,o, )1*#

Initially this (ill pri"arily be supplied by the Internal Audit 8anager but it is

planned to include the ser'ices o, the Internal Auditor in ,uture years#Initial targets (ill be to supply ,urther (or ,or the ational Asse"bly ,or 1alesInternal Audit Ser'ices and ,urther de'elop this relationship# .eyond thisadditional targets (ill include other local 9Is and possible spin o,, (or ,ro"Asse"bly internal audit assign"ents# Additional (or (ill ,ocus on high ,eeearning areas such as ris "anage"ent training and consultancy#

30 50 50

33# Attendance at ""A'C$"Acommittees'events

Attendance at these e'ents raises the pro,ile o, )1* ensures that IAS is a(areo, the latest de'elop"ents in the ,ields o, Internal Audit and Ris 8anage"entallo(s us to in,luence de'elop"ents in the pro,ession and pro'ides possiblecontacts ,or ,ee earning (or#

!5 !5 !5

3# &raining and evelopment To ensure that IAS continues to "axi"ise the ser'ice it pro'ides to )1* and,ee earning clients re7uires that its sta,, continue to de'elop their sills andexperiences#

The Internal Auditor has co"e ,ro" an external audit bacground# So (hile she(ill not re7uire ,urther training to ac7uire pro,essional 7uali,ications so"e on the&ob training and courses (ill be re7uired in the ,irst year to de'elop as an internalauditor# This has a ti"e i"plication on both the Internal Auditor and the InternalAudit 8anager#

The Internal Audit 8anager is also undertaing to co"plete the IIA+s specialist ITAudit paper $DI*A% in Eune 2003# This is being undertaen using IIA study guidesand builds on no(ledge already obtained as part o, his current pro,essional7uali,ications#

Further de'elop"ent opportunities ,or the Internal Audit 8anager and Internal

Auditor (ill be identi,ied and agreed in year#

0 25 25

35# U,C+ Ris) *anagement IAS (ill continue to pro'ide assistance in )1*+s ris "anage"ent process bypro'iding training ,acilitation and ad'ice# This is expected to expand to theSchools and :epart"ents ,ollo(ing its integration at a corporate le'el#

!0 !0 !0

Friday !3 Septe"ber 2002 !;


18/34


36# Annual Planning andReporting

The Strategic and Cperational Plans (ill be re'ie(ed annually to ensure that theycontinue to co'er the ey riss ,acing the )ni'ersity *ollege#

A report is produced annually to the Audit *o""ittee and .oard o, /o'ernorsgi'ing assurance o'er the ,ra"e(or o, control and reporting on Internal Audit+s inyear acti'ity#

5 5 5

3;# Advice. Follow up and

Contingency

Further ad'ice and guidance (ill be pro'ided to Schools and :epart"ents as

re7uired throughout the year# IAS "ay also be called upon to carry out speci,icre'ie(s during the year#

This contingency also pro'ides scope to expand the (or conducted on auditsalready planned during the year should the need arise#

5? 63 62

&otal Audit ays 0 0 0

Friday !3 Septe"ber 2002 !>


19/34


Ta>le 2@ IAS A&&!oa%( o (e a"#$ of U/CN' Co!&o!ae R$','

The ,ollo(ing table "aps the planned audit co'erage ,or the next three years to the *orporate Riss identi,ied by P8/# Thisde"onstrates ho( Internal Audit (ill assist "anage"ent in the reduction o, these riss by re'ie(ing the syste"s through (hich they are"anaged and "aing reco""endations to i"pro'e those syste"s#

U/CN Co!&o!ae R$',' A"#$ A&&!oa%(

R$',Co#e

R$',A!ea ToalR$',

P!o> Im& Planne# Co=e!a)e Yea!

/o'ern"ent Policy *orporate /o'ernance

Sales and 8areting and Public Relations

*orporate Planning

2002-03

200-05

2003-0

!3 Acti'ities o, sta,, or students# *orporate /o'ernance

9u"an Resources

2002-03

200-05

!! Retention o, ey sta,, 9u"an Resources 200-05

? Recruit"ent o, sta,, 9u"an Resources

*ore Syste"s

200-05

Annual

; Ad"in and s upport - In,or"ationSyste"s

Procure"ent and :e'elop"ent o,In,or"ation Syste"s

Student Records Replace"ent Syste"

200-05

Cn-going

5 Attaining *onstituent Institution Status *orporate /o'ernance

Research

2002-03

2002-03

! 9o"e and ) Student u"bers Sales and 8areting and Public Relations

Acade"ic Standards

Franchising

200-05

2002-03

2003-0!5 Research Strategy Research

*orporate Planning

2002-03

2003-0

Friday !3 Septe"ber 2002 !?


20/34


R$',Co#e

R$',A!ea ToalR$',


6 *o"petitor Acti'ity *orporate Planning

Sales and 8areting and Public Relations

2003-0

200-05

!6 )tility Ser'ice states Strategy 200-05

> Sta,, Relationships 9u"an Resources 200-05

2 Acade"ic Duality and Standards Acade"ic Standards

Franchising

2002-03

2003-0

3 Financial Resources *ore Syste"s

Finance 8anage"ent Accounts

Finance Treasury 8anage"ent

Annual

2003-0

2003-0

23 Franchise Student u"bers Franchising 2003-0

2! Strategic 8anage"ent :ecisions *orporate /o'ernance

*orporate Planning

2002-03

2003-052; Ad"in and Support H 8anual

Syste"sGarious

! Terroris" *ontingency Planning 2002-02

!0 9ealth and Sa,ety 9ealth and Sa,ety

*orporate /o'ernance

2002-02

2002-03

!2 /o'ernance 8echanis"sProbity *orporate /o'ernance

*ore Syste"s

2002-03

Annual

!> Intellectual Property Rights Intellectual Property Rights 2002-03

2 Short *ourse u"bers Sales and 8areting 200-05

25 Student :ebt *ore Syste"s

Finance :ebtors

Annual

2002-03

Friday !3 Septe"ber 2002 20


21/34


R$',Co#e

R$',A!ea ToalR$',


22 International Student u"bers Sales and 8areting

*orporate Planning

Franchising

200-05

2003-0

2003-0

Friday !3 Septe"ber 2002 2!


22/34


12. Anne: A ;


23/34

Strategic Internal Audit Plan 2002-2005

1+. Anne: 7 - A"#$ Un$=e!'e

The ,ollo(ing are the ey identi,ied syste"s that "ae up the )ni'ersity *ollegesoperations

A"#$a>le Un$ 4S*'em

Control nvironment/o'ernance - *o"pliance (ith /ood Practice

8onitoring o, xecuti'e 8anage"ent

Register o, Interests

*o""ittee and .oard Crganisation and Ad"inistration

egal C,,ice

Financial Regulations

Policies and Procedures

*o"pliance (ith Funding *ouncil 8e"orandu"

Fraud Policy

1histleblo(ing

Ris 8anage"ent

, *


24/34


Application So,t(are

Technology In,rastructure

Syste"s :e'elop"ent 8ethodologies

Syste"s Installation Accreditation

*hange 8anage"ent

7uip"ent Ac7uisition

Installation Re'ie(

"S'"& elivery and SupportPer,or"ance *apacity Planning

Ser'ice *ontinuity

7uip"ent 8aintenance

Syste"s Security

Access *ontrol

)ser ducation Training

IT *usto"er Support

*on,iguration 8anage"ent

Proble" 8anage"ent

:atabase 8anage"ent


25/34


Space 8anage"ent Ti"etabling

RentRateseases

nergy )tilities 8anage"ent

*ar Paring

8inor 1ors

8aintenance o, Pre"ises

Ser'ices 8aintenance

"ergency Procedures

Stores

/rounds 8aintenance

Capital ProectsPro&ect Planning :esign Appraisal

Pro&ect *ontrol

*apital *ontracts

*apital Financing *harges

Asset *anagementAc7uisition

Accounting


26/34


Finance "ncomeFunding *ouncil /rants Access Funds other /rants

ndo("ents Trust Funds

Research /rants

uropean )nion and SF /rants

*ontracts *onsultancy C'erhead Reco'ery

Tuition Fees

Acco""odation Fees

Finance e/torsPolicy 8anage"ent

*redit 8anage"ent

Student :ebtors

Sundry :ebtors

:ebt Accounting *ollection

:ebt Re'ie( 1rite o,,

Finance penditurePay"ents to suppliers

Rei"burse"ent o, xpenses


27/34


Financial 8anage"ent In,or"ation Syste"s

.udget Preparation

.udgetary *ontrol Forecasting

xternal Returns and *erti,ication

Finance Financial AccountingAccounting Policy /eneral edger Cperations

Eournal Trans,ers Internal In'oices

Suspense *ontrol Accounts

Finance (t#erInsurance

Tax 8anage"ent

GAT Accounting and 8anage"ent

Personnel and Payroll

Crganisation 8anage"ent

9u"an Resources Strategy

Sta,, Planning *ontrol

Recruit"ent Appoint"ent Induction and Probation

"ploy"ent *ontracts and Eob :escriptions


28/34


Part-ti"e Gisiting ecturers

Pensions Ad"inistration

Support ServicesSecurity

*aretaing Portering

*leaning

Teleco""unications

*entral Filing and Archi'es 8anage"ent

Postal Ser'ices

Gehicle Fleet 8anage"ent

Reprographics

Audio Gisual Ser'ices

:ay ursery

Photographic Illustration

Academic SystemsTeaching Duality Assurance Arrange"ents

Research Assess"ent xercise

*urriculu" Planning and :e'elop"ent


29/34


Registry Archi'e 8anage"ent

Galidation o, Cther Institutions

9SA Returns

8anage"ent In,or"ation and Statistics

*ourses :atabase

9ealth1el,are*ounselling

*areers C,,ice

epartmental'Sc#ool AuditsStrategic Planning

.udgeting

Research /rant Pro&ect 8anage"ent

Short *ourses and Su""er Schools

Field *ourses and Cther Gisits

Residences8anage"ent o, 9alls 9ead Tenancies *atering

Roo" Allocations Cccupancy Rates

Receipt Return o, :eposits

CateringStrategy 8anage"ent *ontrol


30/34


8areting and Pro"otion

Public Relations

International iaison

Schools *olleges iaison

Students5 Union/o'ernance and 8anage"ent

.ar 8anage"ent

'ent 8anage"ent/eneral Funds

Shop

Sportsgrounds'Sports Centre8anage"ent

Inco"e and *ost Reco'ery

nvironmentalPolicy 8anage"ent

:isposal o, (aste


31/34


1. Anne: C ; Anal*'$' of S*'em' an# R$',

An assess"ent (as carried out by Internal Audit o, the ey riss that apply to each syste" identi,ied in as operating in )1*# ach o,those (as then assessed as to their o'erall ris to )1*# The ey dri'er ,or "aing this assess"ent (as the ris pro,ile produced byP8/# It also considered the length o, ti"e since internal audit last reported in that area and the opinion gi'en at that ti"e and internal

audit+s no(ledge o, each syste" and any strengths (eanesses opportunities or threats that (e are a(are o, a,,ecting those syste"sboth internal and external to the )ni'ersity *ollege#

Ris le'els (ere graded bet(een ! and > (ith ! representing o( ris representing 8ediu" ris 6 as 9igh Ris and > as *ritical Ris#

A ,ull docu"ent o, this process is a'ailable ,ro" Internal Audit#

ach o, these syste"s (as then "apped to a proposed Internal Audit# The ,ollo(ing sho(s the co'erage o, syste"s and riss ,or eachproposed Audit#

S*'em an# R$', Co=e!a)e

A"#$ Toal R$',Co=e!a)e

N"m>e! ofS*'em'

Co=e!e#

A=e!a)eR$', of

S*'em'

B$)(e'R$',

S*'em

In%l"#e $nA"#$ Plan

La'Re=$ee#

Noe'

Student Records Replace"ent Re'ie( J

Sales and 8areting J 2002

*orporate Planning J 200!

Acade"ic Standards J

Student Records J 2000

Procure"ent and :e'elop"ent o,In,or"ation Syste"s

J 2002

*on,erence 8anage"ent J

*ontingency Planning J

IPR J

9u"an Resources J 200!

Friday !3 Septe"ber 2002 3!


32/34



N"m>e! ofS*'em'Co=e!e#

A=e!a)eR$', of

S*'em'

B$)(e'R$',

S*'em

In%l"#e $nA"#$ Plan

La'Re=$ee#

Noe'

Installation J 200!

states Strategy J 200!

xternal A,,airs and PR N 2002 Incorporate into Sales and8areting

Franchising J

Cperating Syste"s J

Resource 8anage"ent J 2000

Ris 8anage"ent J 2002

Sports *entre J 200!

*orporate /o'ernance J 200! Includes co'erage o, the 9ighest

ris identi,ied by P8/ H/o'ern"ent Policy

P* *ontrols J 2002

IT Cperations J 200!

Finance 8anage"ent Accounts J 2002 Also co'ered by *ore Syste"s

et(ors J 200!

Research J

.uilding and /rounds 8aintenance J 2002

*apital 1ors J 200!

Acco"odation Ser'ices J

Finance Asset 8anage"ent J 2002 Also co'ered by *ore Syste"s

earning Resources J



33/34




A=e!a)eR$', of

S*'em'

B$)(e'R$',

S*'em

In%l"#e $nA"#$ Plan

La'Re=$ee#

Noe'

*atering J 2002 Finance ele"ent co'ered by *oreSyste"s

Finance Payroll J 2002 Also co'ered by *ore Syste"s

uropean Funding J 2002

Finance Financial Accounting J 2002 Also co'ered by *ore Syste"s

Finance Treasury 8anage"ent J 2002 Also co'ered by *ore Syste"s

Finance Procure"ent J 2002 Also co'ered by *ore Syste"s

Finance Inco"e J 2002 Also co'ered by *ore Syste"s

Finance *ash and .an J 2002 Also co'ered by *ore Syste"s

Finance Cther J 2002 Also co'ered by *ore Syste"s

9ealth and Sa,ety J

Students )nion N 200! Financial controls included (ithin*ore Syste"s

Finance *rediors J 2002 Also co'ered by *ore Syste"s

Finance :ebtors J 2002 Also co'ered by *ore Syste"s

Follo(-)p o, *leaning Ser'ices Re'ie( J 2002

Included in *ore Syste"s J Annual

Ksyste"s not co'ered by an auditL3 :ecision "ade not to co'er due tothe relati'ely lo( ris represented

3Support Ser'ices - Postal Ser'ices Gehicle Fleet 8anage"ent Reprographics Audio Gisual Ser'ices :ay ursery Photographic Illustration#Student Ser'ices - /raduation *ere"onies 9ealth1el,are*ounseling *areers C,,ice



34/34




A=e!a)eR$', of

S*'em'

B$)(e'R$',

S*'em

In%l"#e $nA"#$ Plan

La'Re=$ee#

Noe'

by these syste"s#


Sample Strategic IA Plan

Documents

Transcript of Sample Strategic IA Plan