FAQs
Click on a question below to see more information.
1. How are we selected for an audit?
Generally, units are selected for audits using a risk assessment framework that considers
their importance, perceived risk and/or significance to the University. Audits are also
conducted each year because of management request, compliance review or investigation.
2. What does a typical audit include?
The Audit Process outlines the major steps and outcomes of a typical audit performed at
UK.
3. How can I best work with the auditors at the University of Kentucky?
Your first contact with us is usually during the planning stage. You can assist by either
providing relevant information or directing the auditor to the right person or office.
Each auditor that requests information can explain the audit's purpose and objectives, so
you can understand why questions are being asked, and provide accurate answers. If you
have questions or concerns about the information being requested, it is appropriate to
discuss those concerns with the auditor.
4. What information is off-limits to Internal Audit?
In accordance with Internal Audit's Charter, signed by the University's President and a
representative of the Board of Trustees, "all Internal Audit personnel have unlimited and
unrestricted access to all data, records, files, property and personnel of the University."
5. Do we get a chance to respond to an audit?
Your input is considered during all stages of the audit. Formal management's response to
audit observations is included in the final audit report.
6. Who gets the final audit report?
Audit reports are sent to the management of the unit being audited and, as warranted,
University Administration.
7. What should I do if a theft occurs?
You should immediately report it to your supervisor. If you do not feel comfortable
reporting the theft to your supervisor, you may report it anonymously to the Comply Line,
UK Police or the UK Internal Audit Department. Supervisors reporting thefts at UK should
follow UK's Business Procedure E-2-9.
8. What is Internal Audit's reporting structure?
Internal auditors are University of Kentucky employees reporting administratively to the
Executive Vice President for Finance and Administration and functionally to the Audit
Subcommittee of the Board of Trustees.
9. Who audits the Internal Audit Department?
Per the Standards of the Institute of Internal Auditors (IIA), peer reviews are required
every five years. The peer review is conducted by an external committee assessing the
effectiveness of the Internal Audit function.
10. What is the role of UK's External Auditors?
External auditors are employees of public accounting firms who primarily perform the
annual consolidated financial statements audit for the University. External auditors are
charged with providing a documented opinion stating whether or not the consolidated
financial statements are fairly presented, "in all material respects."