PRESENTATION OF INTERNAL AUDIT SERVICES PRESENTATION OF INTERNAL AUDIT SERVICES
DAVIS CAMPUS DAVIS CAMPUS
Rick Catalano Rick Catalano
Director, Internal Audit Services Director, Internal Audit Services
January 2009 January 2009
UC Davis Background
UC Davis Background
Rankings Rankings Washington Monthly: 8th in contributions to society NSF: 10th in research at public universities; 16th overallU.S. News & World Report:
12th public school; 44th
overall
U.S. News & World Report:
Medical Center in top 50 hospitals
Facts & Figures Facts & Figures
Undergraduates: 23,604
Graduate Students: 7,081
Fall 08 Avg. Freshman GPA: 3.79
FY 06 Operating Expense: $2.6B
Contract & Grant Revenue: $535M
Campus Land Area: 7,145 acres
UC Davis Internal Audit Services (IAS) Office
UC Davis Internal Audit Services (IAS) Office
•
•
13 FTEs: Director, 3 Managers, 1 Analyst, 8 Auditors13 FTEs: Director, 3 Managers, 1 Analyst, 8 Auditors•
•
Highly qualified staff; multiple certifications; well Highly qualified staff; multiple certifications; well versed in information technology auditingversed in information technology auditing
¾
¾ 4 CPAs, 4 Certified Internal Auditors, 1 Certified 4 CPAs, 4 Certified Internal Auditors, 1 Certified Information Systems Auditor, 2 Certified Fraud Information Systems Auditor, 2 Certified Fraud Examiners, 1 Certified Information Systems
Examiners, 1 Certified Information Systems
Security Professional, and 1 Global Systems and Security Professional, and 1 Global Systems and Network Auditor),
Network Auditor),
¾
¾ 14 average years of experience14 average years of experience
•
•
Provide full scope audit services; performs financial, Provide full scope audit services; performs financial, compliance, operational, and information systems compliance, operational, and information systems audits; performs advisory services responsive to audits; performs advisory services responsive to UCD, Office of the President, and Regents needs. UCD, Office of the President, and Regents needs.UC Davis IAS Services
UC Davis IAS Services
Audit works with campus management to improve
Audit works with campus management to improve
information system controls and security.
information system controls and security.
•
•
Development & publication of minimum campusDevelopment & publication of minimum campus--wide wide cybercyber--safety standards, including required annual safety standards, including required annual
reporting by each Dean & Vice Chancellor on compliance reporting by each Dean & Vice Chancellor on compliance with written standards.
with written standards.
•
•
Implementation of cyberImplementation of cyber--safety audits to assess safety audits to assesscompliance with security standards and accuracy of compliance with security standards and accuracy of reporting by the Deans and Vice Chancellors.
reporting by the Deans and Vice Chancellors.
•
•
Development of guidelines and best practices for Development of guidelines and best practices forensuring department plans exist to recover and restore ensuring department plans exist to recover and restore data and systems in the event of a disaster.
UC Davis IAS Case Example
UC Davis IAS Case Example
Audit has been a catalyst for effective change to improve Audit has been a catalyst for effective change to improve controls and accountability of research projects.
controls and accountability of research projects.
•
•
New financial reporting specifically designed to assist New financial reporting specifically designed to assist PIs in managing their research projects.PIs in managing their research projects.
•
•
WebWeb--based training program for PIs on their financial based training program for PIs on their financial and administrative responsibilities and best practices for and administrative responsibilities and best practices for addressing typical research management issues.addressing typical research management issues.
•
•
Improved systems for electronically notifying PIs when Improved systems for electronically notifying PIs when final reports have not been filed with funding agencies final reports have not been filed with funding agencies and followUC Davis IAS Management
UC Davis IAS Management
Support & Involvement
Support & Involvement
•
•
UCD Audit Committee chaired by the Provost ; includes UCD Audit Committee chaired by the Provost ; includes Campus & Health System Senior Management teamsCampus & Health System Senior Management teams
•
•
Effective coordination and collaboration with Campus Effective coordination and collaboration with Campus & Health Compliance Units.& Health Compliance Units.
•
•
Funding provided to hire manager to lead IT audit Funding provided to hire manager to lead IT audit functionfunction
•
•
Strong system for following up that involves engaging Strong system for following up that involves engaging Audit Committee when necessaryUC Davis IAS Challenges & Opportunities
UC Davis IAS Challenges & Opportunities
Challenges
Challenges
•
•
Maintaining internal Maintaining internalcontrol systems in face of control systems in face of
budget reductions budget reductions
•
•
Increased demand for Increased demand for audit resources coupled audit resources coupledwith limited available staff with limited available staff
resources resources
•
•
Difficulty recruiting and Difficulty recruiting and retaining qualified staff retaining qualified staff•
•
Increased quantity of Increased quantity of external requirements external requirementsOpportunities
Opportunities
•
•
Budget reductions & Budget reductions & regulatory examination regulatory examinationwill increase value of will increase value of
audit services audit services
•
•
Further strengthen Further strengthencompliance programs & compliance programs &
IT security IT security
