PRESENTATION OF INTERNAL AUDIT SERVICES DAVIS CAMPUS Rick Catalano Director, Internal Audit Services January 2009 UC Davis Background Rankings Facts & Figures Washington Monthly: 8th in contributions to society Undergraduates: NSF: 10th in research at public universities; 16th overall Fall 08 Avg. Freshman GPA: 3.79 U.S. News & World Report: 12th public school; 44th overall U.S. News & World Report: Medical Center in top 50 hospitals 23,604 Graduate Students: 7,081 FY 06 Operating Expense: $2.6B Contract & Grant Revenue: $535M Campus Land Area: 7,145 acres UC Davis Internal Audit Services (IAS) Office • • 13 FTEs: Director, 3 Managers, 1 Analyst, 8 Auditors Highly qualified staff; multiple certifications; well versed in information technology auditing ¾ 4 CPAs, 4 Certified Internal Auditors, 1 Certified Information Systems Auditor, 2 Certified Fraud Examiners, 1 Certified Information Systems Security Professional, and 1 Global Systems and Network Auditor), ¾ 14 average years of experience • Provide full scope audit services; performs financial, compliance, operational, and information systems audits; performs advisory services responsive to UCD, Office of the President, and Regents needs. UC Davis IAS Services Audit works with campus management to improve information system controls and security. •Development & publication of minimum campus-wide cyber-safety standards, including required annual reporting by each Dean & Vice Chancellor on compliance with written standards. •Implementation of cyber-safety audits to assess compliance with security standards and accuracy of reporting by the Deans and Vice Chancellors. •Development of guidelines and best practices for ensuring department plans exist to recover and restore data and systems in the event of a disaster. UC Davis IAS Case Example Audit has been a catalyst for effective change to improve controls and accountability of research projects. •New financial reporting specifically designed to assist PIs in managing their research projects. •Web-based training program for PIs on their financial and administrative responsibilities and best practices for addressing typical research management issues. •Improved systems for electronically notifying PIs when final reports have not been filed with funding agencies and follow-up to ensure reports are filed. UC Davis IAS Management Support & Involvement • UCD Audit Committee chaired by the Provost ; includes Campus & Health System Senior Management teams • Effective coordination and collaboration with Campus & Health Compliance Units. • Funding provided to hire manager to lead IT audit function • Strong system for following up that involves engaging Audit Committee when necessary UC Davis IAS Challenges & Opportunities Challenges • Maintaining internal control systems in face of budget reductions • Increased demand for audit resources coupled with limited available staff resources • • Difficulty recruiting and retaining qualified staff Increased quantity of external requirements Opportunities • Budget reductions & regulatory examination will increase value of audit services • Further strengthen compliance programs & IT security • Streamlining of campus business processes to increase operational efficiency UC Davis IAS Summary • The Davis campus has a mature audit function that is recognized and respected within the campus community. • Audit staff resources have, and will continue to be, stretched to address the most significant risk issues facing the campus. • Audits of information security, contracts and grants, and construction will remain a high priority. • Audit will continue to maximize the use of technology to improve effectiveness.