Internal audit manual final project

Internal Audit Manual Page 0
INTERNAL
AUDIT MANUAL
Montefalco Institute of Technology of San Francisco
Adanza, Andrea
Baje. Jewel AD
Boaquiña, Honey May
Calagui, Mary Joy
Escopete, Debbie Jane

C ORP ORA TE A N D C OM M U N I C A TI ON S
INTERNAL AUDIT MANUAL
 Graphic Design Institute
12345 Main Street • Suite 100
Spokane, WA 56503
Phone 203.555.0167 • Fax 203.555.0168

TABLE OF CONTENTS
CHAPTER 1 PAGE NO.
SECTION 1.Purpose of Internal Audit Manual 3
SECTION 2.Reporting Structure 3
SECTION 3.Duties of Internal Auditor 4
SECTION 4.Overview of The Internal Audit 4 - 6
CHAPTER 2
SECTION 5.Planning Phase 7
SECTION 6.Organizing Phase 7
SECTION 7.The Preliminary Phase 8
SECTION 8.The Conducting Phase 9-10
SECTION 9.The Reporting Phase 11
CHAPTER 3
SECTION 10.Internal Audit Work papers 12
SECTION 11.Audit Communications 12-15
SECTION 12.Purpose of Sampling 16-18
SECTION 13.Investigating Suspected Fraudulent Activities Or 18-24
Financial Irregularities

SECTION 1 PURPOSE OF INTERNAL AUDIT MANUAL
This manual summarizes the operations of the internal audit function at the Montefalco Institute
of Technology of San Francisco and delineates policies, standards and procedures which will
generally govern the internal audit function. Notwithstanding the foregoing, these policies,
standards and procedures may not be followed for certain special projects requested by the
Finance Committee of the Board of Trustees and the College President, fraud or financial
irregularity audits, and under other special circumstances.
SECTION 2 REPORTING STRUCTURE
Montefalco Institute of Technology of San Francisco
Chapter
1
Board of Trustees
Internal Auditor President
VP of
Academic
Affairs
Director
Intercollegia
te Athletics
VP of
Administrator
and Finance
Executive
Director
Associate
Director
Admin
Assistant
VP of
Information
Technology
VP of
Institutional
Advancement
VP of
Student
Services

SECTION 3 DUTIES OF INTERNAL AUDITOR
In discharging his job responsibilities the Internal Auditor will
 Develop, document, implement, test and maintain a comprehensive internal audit plan
and system of internal controls to help provide assurance that applicable laws, regulations
and Institute policies and procedures are complied with judiciously;
 Examine financial transactions for accuracy and compliance with institutional policies
and applicable laws and regulations;
 Evaluate financial and operational procedures to assure adequate internal controls are
presents;
 Identify, assess and evaluate the Institute’s risk areas, appropriate recommendations for
improved internal controls and accounting procedures; and research and adopt industry
best practices where appropriate;
 Work with the senior leadership of the Institute to identify key business risks, assess
those risks, and establish risk management procedures and practices based on industry
best practices;
 Oversee the implementation and administration of the Institute’s whistle blower policy
addresses and respond in a timely manner all submitted complains;
 Oversee the preparation and timely filing of all state, local and federal tax returns;
 Prepare necessary reports for the Finance Committee of the Board of Trustees;
 Research and respond to internal audit inquiries from the Board of Trustees and the
College President, and other members of the College’s senior management; and
 Complete other projects and perform other duties as assigned by the Finance Committee
of the Board of Trustees and the College President.
SECTION 4: OVERVIEW OF THE INTERNAL AUDIT
FUNCTION A. Introduction
This section outlines the Internal Auditor's responsibilities with respect to the internal audit
function. The Internal Auditor describes audit planning and scheduling, and discusses the
scope and types of internal audits generally performed at the Montefalco.
8. Scope of Internal
Audits
The internal audit function's scope of operations is by its very nature quite expansive. The
internal audit function will assist the College in fulfilling its vision, mission, strategic initiatives,
and objectives, while adhering to its core values, by bringing a systematic, disciplined

approach to evaluate and improve the effectiveness of enterprise-wide risk management,
internal control systems, and governance processes.
The internal audit function will help to:
 Risk are determined and minimized
 Employees are informed and work in accordance with the college goals and objectives,
standards and protocols.
 College resources are acquired and valuated properly.
 College operations and internal control are in accordance with the organzation’s mission
and vision.
 Detect the fraud and error that will affect the performance of the entity.
Upon determining the material misstatement and other suspicious transactions in the entity, it
will be communicated to the board of trustees and to the authorized persons.
C. TYPES OF AUDIT
In making an internal audit plan, the Auditor will determine what to of audit will be conducted.
1. DEPARTMENTAL AUDIT
This audit will be conducted to a specific department in an entity. This will determine if
the college employees in such department are working in accordance with the college
standards and protocols.
2. FINANCIAL AUDIT
The financial statement of the college will be examined so that the college will know
what is the status of the entity and how it performs.
3. OPERATIONAL AUDIT
Operations are examined with substantive tests and procedures to evaluate the
performance of the college. Teachers will be observed and an example of this is an ISO.
4. FRAUD AND FINNACIAL IRREGULARITY AUDIT
This is conducted in order for the college to know if fraud and malicious transactions
occur in different fields.
5. FOLLOW-UP AUDITS
This is conducted after the major audit. It will determine if the advices of the auditor is
taken into consideration.
D. THE PHASED AUDIT APPROACH
This allows the auditor to:

 Establish plans on how to complete the audit
 Identify the internal audit process
 Provide better communication to the audit involved persons.
 Determine the audit plan and its phases such as planning, organizing, preliminary,
conducting and reporting phase.
E. INTERNAL AUDIT PROCEDURES AND TECHNIQUES
1. OBSERVATION AND INQUIRY
The internal auditors need to know how the business operates. In connection to this, he
will observe or conduct an observation in the field or specific department. He will also
ask some questions to the person in-charge or the manager.
2. ANALYSIS AND REVIEW
The auditor will analyze the financial statement and operation of the college. He will
compare the current and previous performance of the entity.
3. INSPECTION
Inspection of accounts and other necessary fields will be thoroughly examined in order to
assure that the data presented is accurate.
4. CONFIRMING
To confirm the validity of the examined accounts, the auditor will sign the papers.
5. SCANNING
If the accounts are suspected to be understated or overstated, the auditors will scan some
documents such as ledgers.
F. INTERNAL CONTROL
It describes the level of security in the entity. It is in the hands of the manager.
CONTROL ACTIVITIES
It includes how the employees behave. How they communicate to each other and if they
are following the rules and regulation of the university.
MONITORING
Internal control must be monitored and checked if it is tight enough to provide a good
entity performance.
 Internal control is effective if the management has a reasonable assurance that he
understand the college operation, procedures, policies, protocols, and the college is
following with the laws and regulations.

SECTION 5. PLANNING PHASE
I. PHASE OBJECTIVES AND PROCEDURES
1. PHASE OBJECTIVE
This phase will determine the audit objective and notify the staff in-charge to deliver their
work.
2. PHASE PROCEDURES
After developing the audit objectives, the auditor will make an engagement letter and
other necessary files to begin the auditing procedures.
II.DEVELOPMENT OF AUDIT OBJECTIVES
It is the most important part of the audit. It will identify the purpose of the audit and how
it will affect the performance of the entity either from the long-run or short-run.
III.AUDITEE NOTIFICATION
After the audit objectives, the auditor will notify the auditee that everything is ready and
they will conduct the audit. The letter will contain the name of the auditor and auditee and their
address, type of audit that will be conducted and the date.
IV.PHASE CONCLUSION
It will conclude the delivery of the letter to the auditte either hard copy or soft copy. The
managers, board of trustee and other concerned personnel will be notified and given by the
copies of letters too.
SECTION 6. ORGANIZING PHASE
I. PHASE OBJECTIVES AND PROCEDURES
1. PHASE OBJECTIVE
The auditor will develop a preliminary program and conference.
2. PHASE PROCEDURES
The internal auditor will review all the necessary requirements for the auditing activity. It
includes the accounting information, pertaining contracts and agreements, minutes of the
Chapter
2

meetings, policies and procedures and accounting policies and this will lead to the
preliminary audit program.
II.PRELIMINARY AUDIT PROGRAM
It is where modifications are made so that proper auditing activities will be conducted.
III.OPENING CONFERENCE
To discuss the overall plan of the audit. It will be discussed if what type of audit activity
will be conducted and the notification to the auditee.
PHASE CONCLUSION
The audit activity will not began if the preliminary audit activity will not be conducted.
SECTION 7 THE PRELIMINARY PHASE
The preliminary phase begins upon the conclusion of the Opening Conference and ends with the
preparation of the audit program.
A. Phase Objectives and Procedures
(1) Phase Objectives
 The objective of the preliminary phase is to gain a basic understanding of the College
function, activity, department or unit which is under audit, including the accounts
available for its use, the types and volumes of transactions processed, and the systems
and processes used in the operations.
 The preliminary phase will allow the Internal Auditor to develop a clear understanding of
the events and practices which may have a significant impact on the operation of the
College function, activity, department or unit under audit.
 The preliminary phase ultimately allows the Internal Auditor to obtain a broad overview
of the internal controls in place in the College function, activity, department or unit which
is under audit. The preliminary phase also allows the Internal Auditor to identify any
areas of the auditee’s operations which may require special attention or consideration.
(2) Phase Procedures
During the preliminary phase the Internal Auditor will:

 Review correspondence files, prior work papers (if applicable), and budgetary
information.
 Identify significant changes in account balances over time or large variances from
expectation or budget and perform an analytical review to determine the significance of
these variances;
 Review organizational charts and job descriptions and the nature of the auditee’s
activities and functions;
 Evaluate the auditee’s internal controls;
 Discuss matters with the auditee that may impact the audit;
 Determine the status of deficiencies noted during previous audits (if any);
 Inquire about problem areas which the auditee would like the Internal Auditor to review;
 Make arrangements with the auditee for the presentation of the data, which will be
needed during the audit; and
 Develop the preliminary estimates of materiality levels and acceptable error rates.
(3) Phase Conclusion
This phase concludes with the preparation of the audit program.
SECTION 8 THE CONDUCTING PHASE
The conducting phase of the audit begins with the finalization of the audit program and ends
with the Closing Conference.
The extent of the tests performed during this phase is heavily dependent upon the discretion and
judgment of the Internal Auditor. The materiality of the amounts involved and the relative risk of
the existence of errors or other irregularities will be weighed heavily when considering and
planning audit tests.

A. Phase Objectives and Procedures
(1) Phase Objectives
During the conducting phase the Internal Auditor will:
 Execute the approved audit program;
 Prepare audit work papers which detail the necessary audit work accomplished to satisfy
each step of the audit program;
 Prepare a Draft Final Audit Report;
 Obtain management responses to preliminary findings; and
 Hold the Closing Conference.
(2) Phase Procedures
Procedures utilized for the accomplishment of the audit program will vary based on the scope
and objectives of the audit. Some procedures that will regularly be employed during this phase
include a review of internal controls and the tracing of transactions through the College function,
activity, department, or unit under audit.
B. Preliminary Audit Findings
Preliminary audit findings are written statements of conditions noted during the audit that require
corrective action and a response by the auditee.
(1) Types of Findings
Deficiencies and findings noted during the audit will be classified as reportable,non-reportable,
or de minimus. Reportable findings will be included in the Final Audit Report. Non-reportable
findings will not be included in the Final AuditReport, but may be discussed briefly during the
Closing Conference. It is important to note that the category of any deficiency or finding may
change as additional information becomes available.

(2) Processing of Findings
As deficiencies are identified during the audit, they will be discussed with the auditee to verify
the facts before any audit reports are drafted. If these discussions confirm that a deficiency
exists, the Internal Auditor will draft a preliminary finding. All findings will be considered
preliminary unless (and until)they are included in the Final Audit Report.
C. The Closing Conference
The Closing Conference of each audit will be scheduled for the last day of fieldwork; i.e., the last
day of the conducting phase.
During the Closing Conference the Internal Auditor will present his preliminary findings to the
auditee, and he will seek the auditee’s input where appropriate.
D. Phase Conclusion
This phase will conclude upon conclusion of the Closing Conference.
SECTION 9 THE REPORTING PHASE
The reporting phase begins upon completion of the Closing Conference and ends when the Final
Audit Report is issued. The activities completed during this phase include: preparing a Draft
Audit Report; discussing proposed changes with the appropriate level of management; preparing
a Final Audit Report; and distributing the Final Audit Report to the Finance Committee of the
Board of Trustees, the President, the Vice President for Business and Finance, and other
appropriate members of senior management and/or department management.

SECTION 10 INTERNAL AUDIT WORKPAPERS
In the performance of audit work, the Standards for the Professional Practice of Internal Auditing
state that “Internal auditors should collect, analyze, interpret, and document information to
support audit results.” The Internal Auditor’s workpapers will provide the principal evidence that
these standards were met, and the audit was performed professionally.
The term “workpapers” includes all documents and papers collected or prepared during a given
audit. Workpapers provide the basis and support for the conclusions reached by the Internal
Auditor. All relevant workpapers prepared during a review will be preserved and included in the
workpaper files maintained by the Internal Auditor.
A. Characteristics of Workpapers
Workpapers include the evidential matter that links fieldwork and the Final Audit Report.
Workpapers will contain the necessary evidence to support the findings, judgments, and
conclusions in the Final Audit Report.
(1)Sufficiency
Workpapers will always be complete and accurate, and include adequate data to precisely
indicate the audit work performed. Workpapers will also provide support for findings,
judgments, and the conclusions reached by the Internal Auditor as a result of the internal audit
process. Workpapers will delineate sufficient data so that the Finance Committee of the Board of
Trustees can easily verify that:
 The audit assignment has been properly planned;
 The auditee’s system of internal control has been reviewed and evaluated in determining
the extent of the audit tests undertaken; and
 Appropriate audit tests were performed, and the appropriate auditing procedures were
followed.
(2)Competency
Workpapers will include only high quality information and evidence. Accordingly, the Internal
Auditor will take all necessary steps to help ensure that the information contained therein is
reliable.
(3)Relevance
The information contained in the workpapers will be restricted to matters that are materially
important and relevant to the audit objectives.
Chapter
3

(4)Usefulness
The evidence retained in the workpapers must be useful in helping the College meet its goals.
(5)Clarity and Understandability
Workpapers will be understandable without detailed supplementary oral explanations.
Workpapers will also be complete and concise.
(6)Principles of Documentation
 Workpapers will substantiate everything included in the Final Audit Report
 A workpaper or series of workpapers will be prepared for each step in the audit program.
 Workpapers will clearly identify the documents or series of documents examined. It is
not necessary to include a copy of each document examined, although in some cases,
efficiency may result by utilizing copies of documents.
B. Indexing and Cross-Referencing Workpapers
The Internal Auditor shall use a standard numbering and indexing system for allworkpapers. It is
specifically noted that this standard numbering and indexingsystem may change from time to
time.
C. Standards for Workpapers
All workpapers prepared by the Internal Auditor shall be prepared in good formwith proper
attention to layout, design, and legibility, with complete headings,explanations of sources, and
verification of work performed. The Internal Auditorwill generally observe the following rules
when preparing workpapers:
 Every workpaper will be properly identified. The workpaper heading will include the
name of the auditee, a description of the information presented, and the period covered or
applicable date.
 A separate workpaper will be used for each audit program step.
 All workpapers will be linked to the audit program.
 The source of the data presented on each workpaper will be clearly stated so as to leave
no doubt as to the source of the information.
 The nature of verification work performed by the Internal Auditor will be indicated on
each workpaper. A review of paid invoices, for example, might be supplemented by the
testing of related purchase orders to substantiate the authenticity of the invoices
examined; a description of this verification procedure will be included in the workpapers.
 The use of audit tick mark symbols may aid in identifying the procedures followed in
preparing a workpaper and avoid lengthy explanations. Whenever symbols are employed,

they will be accompanied by a legend explaining their significance. Symbols will never
be recorded until the procedures which they signify have actually been executed.
 The extent and scope of sampling will be clearly stated at every phase of the audit to
which it is applied; accordingly, the workpapers will disclose the character and extent of
all sampling methods utilized.
D. Audit Evidence
In performing internal audits the Internal Auditor generally gathers evidence from internal
sources, which may require verification from external sources. Some of the internal sources of
audit evidence include books of account, ledgers and records, memoranda, minutes of meetings,
documents that support transactions, and management letters. Information gathered from these
sources may be verified from external sources that include confirmations of bank balances,
accounts receivable, investment balances, asset held by third-parties, long-term debt, and other
assets and liabilities.
All of the information gathered to support the internal audit effort, and the conclusions drawn
therefrom, should be considered audit evidence which may be categorized as analytical,
documentary, physical, or testimonial.
(1) Analytical Evidence
Analytical evidence includes computations, comparisons, reasoning, and the separation of
information into components.
(2) Documentary Evidence
Documentary evidence consists of letters, contracts, accounting records, invoices, etc.
(3) Physical Evidence
Physical evidence is obtained by direct inspection or observation of (1) activities,(2) property, or
(3) events. It may take the form of memoranda, photographs, charts, or other summary
documentation which recapitulates the subject matter of the inspection.
(4) Testimonial Evidence
Testimonial evidence is obtained from others through statements received in response to
inquiries or through interviews. The statements critical to the audit will be corroborated through
independent verification when feasible.
SECTION 11 AUDIT COMMUNICATIONS
The Final Audit Report is designed to assist College management in measuring its own
performance, particularly with respect to the reliability of established internal controls.
A. General Standards of Report Writing
 Findings, recommendations, and opinions will be expressed objectively.

 Final Audit Reports will be organized so as to clearly and concisely disclose relevant,
timely, and important information that can be used to enhance or improve relevant
aspects of College operations.
 Findings, recommendations, and comments will contain all relevant information
necessary for the addressee to fully understand the reported conditions. All Final Audit
reports will present factual matters accurately, completely, and fairly.
 The Final Audit Report will prominently identify the most significant conditions
requiring management’s attention.
 The Final Audit Report will concentrate on the results of audit tests and not the tests
themselves.
B. Final Audit Reports
(1) Report Preparation Procedures and Content
The Internal Auditor will prepare a Draft Final Audit Report prior to the Closing Conference.
The Draft Final Audit Report may include (among others) sections dealing with the following:
background, scope, audit objectives, audit findings, and recommendations. At the Closing
Conference, the Internal Auditor will request a formal response to all reportable findings from
management. Management will be requested to respond within fourteen days of the date of the
Closing Conference.
After reviewing management’s responses to the Draft Final Audit Report, the Internal Auditor
shall make any changes he deems necessary. After processing any necessary changes, a Final
Audit Report will be distributed first to the Finance Committee of the Board of Trustees, then to
the President, the Vice President for Business and Finance, and other members of senior
management and/or department management that may be appropriate. Because of the many and
varied activities at the College, and the various reporting relationships, the addressees and
distribution list of each Final Audit Report will be determined on a case-by-case basis by the
Internal Auditor. All Draft Final Audit Reports and Final Audit Reports shall be deemed
“confidential,” and the Internal Auditor shall take appropriate measures to ensure their limited
distribution to those individuals with a legitimate business need for possessing the information
contained therein.
C. Follow-up Audit Reports
Approximately six months following the completion of each audit, the Internal Auditor will
appraise the effectiveness of actions taken to resolve any previously reported deficiencies.

SECTION 12 PURPOSE OF SAMPLING
Sampling will be used extensively by the Internal Auditor in his work. Samples are
portions of a population that are used to represent the population. Samples are very useful in
obtaining information about a population.
There are many types of samples; however, samples can be grouped into two main categories,
judgmental samples and statistical samples.
A. Judgmental Sampling
Judgmental sampling occupies a prominent place in the Internal Auditor's sample selection
and evaluation procedures. Judgmental sampling may be used to select examples of
deficiencies to support a hypothesis that a given system is weak. This is a valid use of
judgmental sampling. But it will not be used to estimate the number or value of such items
in the total population because not every item in the population was given an equal chance of
selection.
Judgmental sampling will in some cases be used to provide the Internal Auditor with clues as
to whether to proceed with a statistical sample. If the Internal Auditor encounters a well-
designed and well-executed internal control system, good management, well-trained
employees, and a feedback mechanism that highlights errors, it may be unnecessary to spend
a great deal of time performing extensive transaction tests. A small sample selected at random
to obtain some reasonable representation of the population may suffice. If no errors are
found, the Internal Auditor may reasonably determine that he sees no basis for examining
the population further or for suspecting any material error.
B. Statistical Sampling
The main advantages of statistical (probability) sampling over judgmental sampling are
based on the fact that there is a significant body of accepted theory to support and explain
statistical sampling. Because strong theoretical support exists, the use of statistical sampling
is widely accepted.

One of the attractive aspects of probability sampling is that it is possible to measure the
reliability of the estimates computed from the sample results. The ability to measure
reliability furnishes additional desirable features for statistical sampling. There are several
types of statistical sampling.
(1) Random Number Sampling
Random number sampling is generally considered the most likely to result in a random
sample. It makes use of a computerized random number generator to select items to be
sampled.
(2) Interval Sampling
Interval sampling simply means selecting items at intervals; it is a relatively simple
sampling method. When using interval sampling, every item must have an equal chance of
being selected. Interval sampling is particularly useful when the records are in manual
form, the items are unnumbered, or the population contains some items that are not applicable
to the audit purpose.
(3) Stratified Sampling
In stratified sampling the Internal Auditor will separate the population into two or more
strata; i.e., separate populations, and then takes samples from each. Typically, significant
or expensive items will be set aside in one stratum for complete examination, and sampling
will generally be used for the remaining strata.
In every population, the Internal Auditor will look for wide variations in size, amount, and
characteristics of the items making up the population. When such wide variations are found,
the Internal Auditor will consider stratification. Stratified sampling arranges the population so
as to provide greater sampling efficiency. Properly used, stratified sampling will result in a
smaller variance within a given sample size than simple random sampling.
(4) Cluster Sampling

When documents and records are so scattered or dispersed that it is too time consuming and
costly to use simple random number sampling, the Internal Auditor may use the technique
of cluster sampling. Cluster sampling is what the name implies; clusters of items are selected at
random, then the clusters are either examined in their entirety or are themselves sampled.
Clusters may be based on natural separations; e.g., all documents in a file cabinet drawer may
be examined. Clusters may also be artificial.
(5) Dollar Unit Sampling
The dollar unit sampling technique selects records according to monetary units rather than
physical attributes. The advantages of dollar unit sampling are smaller sample sizes, an
almost infinite degree of stratification and the greatly increased likelihood of finding large
but infrequent errors.
(6) The Sample Size
Sample sizes can be determined judgmentally or statistically. The decision will be made based
on the audit objectives. In many audit situations a large audit sample or a statistically
determined sample size is unnecessary. Where the Internal Auditor has determined the
system of internal control to be strong, it may be appropriate to sample only a few handpicked
items to determine that the system is actually functioning properly.
Assuming the system functions as planned, it can then be declared that the system does indeed
have the purported control points, and they are in fact working. If a particular system is found
satisfactory from an internal control standpoint further sampling may not be necessary or
appropriate.
SECTION 13 INVESTIGATING SUSPECTED FRAUDULENT ACTIVITIES OR
FINANCIAL IRREGULARITIES
There are three phases in the fraud program: prevention, detection, and investigation. The
Internal Auditor and the College’s operating management are responsible for recognizing
the exposures, control weaknesses, and situations which foster fraudulent activity.

The Internal Auditor may learn of known or suspected fraudulent activities from many
sources, including routine audits. Also, the Internal Auditor may be called upon by the Finance
Committee of the Board of Trustees, the President, the Vice President for Business and Finance,
or other members of senior management to conduct investigations of known or suspected
fraudulent activities.
Because of the sensitivity and the potential litigation exposure for the College, all investigations
of known or suspected fraudulent activities shall be conducted carefully and thoroughly.
The purpose of these audit procedures is to establish a standardized methodology for
the Internal Auditor to follow when investigating, processing, and reporting findings of
known or suspected misappropriation and similar irregularities. These procedures may
be used in the investigation of fraudulent activities or financial irregularities at the College.
A. Objectives
The objectives of investigations conducted by the Internal Auditor are to determine
whether the suspected irregularity occurred, to determine and document the source and
amount of funds involved, to identify the individuals responsible for the loss, and to provide
recommendations for corrective actions to improve prevention and detection procedures.
As delineated in Section 4 of the Internal Audit Charter, the Internal Auditor, and anyone
engaged or acting on his behalf, is duly authorized without limitation by the Finance
Committee of the Board of Trustees to:
 Have free, full, unrestricted, and unfettered access to all College functions, records,
property, activities, manual and automated systems, and personnel.
 Have free, full, unrestricted, and unfettered access to all third-party institutions,
organizations, and individuals who have business dealings with the College.
 Have free, full, unrestricted, and unfettered access to the Finance Committee of the
Board of Trustees, the President.

 Allocate resources, set frequencies, select subjects, determine scopes of work, and apply
appropriate techniques required to accomplish the internal audit function’s objectives.
 Obtain the necessary assistance of personnel in functions, departments, and/or units
of the College where audits are performed, as well as other specialized services from
within or outside the College.
B. Responsibilities
The Internal Auditor may consult and coordinate any investigation activities with the Finance
Committee of the Board of Trustees, the President, the Vice President for Business and
Finance, and other members of senior management as appropriate.
In order to avoid damaging the reputation of innocent persons suspected of wrongful
conduct, and to protect the College from potential civil liability, the results of
preliminary investigations by the Internal Auditor will not be disclosed or discussed with
anyone except the Finance Committee of the Board of Trustees, the President, or other
members of senior management who have a legitimate need to know such results in
order to perform their assigned duties and responsibilities.
C. Definitions
The subject of these procedures is known or suspected losses resulting from misappropriation
or misuse of College assets entrusted to employees as part of their job responsibilities. The
terms used throughout these procedures are:
 Assets: Money, negotiable securities, data and physical property of the College,
whether owned or leased.
 Conflict of Interest: When College resources, including staff time, funds, College
reputation, or other assets are diverted from, or made less effective in their intended
purposes by virtue of an individual’s activities, association, or interests outside his or her
primary College affiliation.

 Defalcation: To appropriate College assets fraudulently to one’s own uses; defalcation is
synonymous with misappropriation.
 Error: Unintentional mistakes in financial or accounting data. An error may include:
1. Mathematical or clerical mistakes in the underlying records and accounting
data;
2. Oversight or misinterpretation of facts; or
3. Misapplication of accounting policy.
 Fraud: The intentional misrepresentation of facts undertaken to mislead management,
auditors, or other users of financial statements; i.e., the misappropriation or misuse of
College assets, and other similar irregularities. Fraud may involve:
1. Manipulation, falsification, or alteration of records, or documents;
2. Misappropriation of College assets;
3. Suppression or omission of transactions or the effects of transactions from College
records or documents;
4. Recording transactions without substance;
5. Manipulation of accounting policies; or
6. Any other act or series of acts intended to defraud the College.
 Irregularity: Intentional mistakes or distortions of financial statements, such as
misrepresentation or misappropriation of assets.
 Misappropriation: Any dishonest or fraudulent act which includes such things as:
1. Unauthorized use, taking, or destruction of College property for personal gain, or
to purposely deprive the College of its use;
2. Forgery or alteration of checks, drafts, promissory notes, and securities;
3. Any taking or unauthorized use of College funds, securities, supplies, or any other
asset;

4. Forgery or alteration of policy-related items, such as loans, assignments,
changes in beneficiaries, etc.;
5. Any irregularity in the handling or reporting of cash transactions;
6. Fraudulent or conflict of interest decisions which result in financial loss to the
College; or
7. Any similar or related irregularity.
D. Preliminary Investigations
The Internal Auditor shall initiate a preliminary investigation of any reported or suspected
misconduct to verify that there is substance in fact to the suspected irregularity and whether the
College has sustained any actual losses. In conducting this preliminary investigation, the
Internal Auditor shall gather sufficient information to identify the College function, activity,
department, or unit involved; the individual(s) involved; and the estimated magnitude of any
loss.
During the course of the preliminary investigation the Internal Auditor of Internal
Audit may, where appropriate:
 Identify each account or set of related accounts that were, or could be used in or affected
by the defalcation, and determine the purpose of each account and how it can be used;
 Identify the types of transactions/documents used to make entries, adjustments, and/or
inquiries against each account and who may initiate and authorize such
transactions/documents;
 Determine the source of funds involved in the fraudulent activity;
 Determine whether the College function, activity, department, or unit involved has
experienced unusual or unexplained losses in the recent past;
 Determine the types of questionable activities that have occurred, may be occurring, or
could occur, how the possible irregularities were committed, all likely means of
conducting the alleged activities, and the level of personnel potentially involved;

 Determine the degree of reliance which should be placed on existing internal controls,
and the extent of testing required;
 Develop a detailed audit program that will promote effective and efficient attainment of
the investigation objectives;
 Conduct a preliminary meeting with the Finance Committee of the Board of Trustees,
the President, and other members of senior management as appropriate.
If the preliminary findings indicate that the available evidence has no substance in fact, the
investigation shall be terminated, and the appropriate members of College management will
be notified of the decision.
If the preliminary findings show the evidence to be of sufficient strength to justify continued
investigation or immediate action, a complete audit or investigation shall be conducted by the
Internal Auditor.
E. Investigation
The investigation may be continued to further substantiate the size and type of loss and/or to
identify the responsible individuals.
During this phase, the Internal Auditor must select the specific auditing procedures
that in his judgment are necessary to successfully complete the investigation. To facilitate a
successful result, the Internal Auditor may, among other things:
 Chart the flow of transactions and documents identified during the preliminary
investigation and identify key basic control points throughout the flow;
 Collect all the necessary documents, records, files, and correspondence that will be
examined;
 Copy and catalogue all documents to develop audit workpapers on which to make
notations and cross-references;

 Examine and evaluate the documentation collected, looking specifically for errors,
irregularities, alterations, missing documents, and how the documents were processed;
 Review the budgetary control system in place for developing the budget and assurance
of budget compliance; or
 Evaluate the effectiveness of existing internal controls.
F. Disposition
The final responsibility for matters involving a misappropriation of College assets rests with
College management. Upon completion of the investigation and/or audit, a written report will
be submitted to the Finance Committee of the Board of Trustees, and the President. Copies of all
such investigation and/or audit reports may also be sent to other members of senior
management if appropriate; these reports shall be deemed “confidential," and the Internal
Auditor shall take appropriate measures to ensure their limited distribution to those individuals
with a legitimate business need for possessing the information contained therein.
Adopted by the Finance Committee of the Board of Trustees September 17, 2020

Internal audit manual final project

More Related Content

What's hot (20)

Similar to Internal audit manual final project (20)

More from AndreaAdanza107 (12)

Recently uploaded (20)

Internal audit manual final project