Internal Control Questionnaire 2
Internal Control Questionnaire 2
Internal Control Questionnaire 2
YES
NO
Not
Sure
N/A
COMMENTS
BACKGROUND
1. Does the department have an overall
mission?
2. Has a risk assessment been performed
recently for the department?
3. Does the department have a current
organization chart?
4. Does the department have a written
policies and procedures manual?
5. Are the departments organizational
structure and lines of authority clearly
understood by employees?
6. Are employee job descriptions, desk
procedures, and other internal operating
procedures current?
7. Has the department undergone other
audits/reviews (external, federal and/or
local inspector general) in the past 3
years?
8. Does management demonstrate the
importance of integrity and ethical
values, including the Presidents seven
management values?
9. Does the department have the time,
tools, and resources to effectively
accomplish its mission and objectives?
10. Are there any special issues or areas of
concern to which the department feels
the Office of Internal Audit should be
aware of or devote additional time?
YES
NO
Not
Sure
N/A
COMMENTS
YES
NO
Not
Sure
N/A
COMMENTS
YES
NO
Not
Sure
N/A
ASSET MANAGEMENT
48. Are department custodians provided
with a property manual or operating
procedure to effectively conduct their
duties?
49. Are property items over a certain dollar
threshold appropriately tagged?
50. Is the use of property off-campus
properly accounted for?
51. Is off-campus property included in the
annual inventory?
52. Are all work areas and storerooms
appropriately secured to deter
unauthorized entry?
53. Are attractive items such as laptops,
projectors, tools, and cameras kept in a
secure location when not being used?
54. When equipment is moved from one
location to another within the
department, are asset management
personnel notified?
COMMENTS
YES
NO
Not
Sure
N/A
PAYROLL
62. Are employees responsible for payroll
provided with a manual or operating
procedure?
63. Have employees charged with payroll
and distribution responsibilities been
appropriately trained?
64. Are time and labor entries approved by
the dean, director, unit head, or other
manager who has supervisory
responsibilities for the person whose
time is being approved?
65. Does the department track and maintain
adequate records of employees'
vacation time and sick leave?
66. Have procedures been implemented to
ensure that overtime and compensatory
hours worked are appropriate and
approved in advance by an employees
supervisor?
67. For employees required to maintain
time cards for time worked, do the time
records reflect the actual hours worked
rather than the hours scheduled to
work?
COMMENTS
YES
NO
Not
Sure
N/A
COMMENTS
YES
NO
Not
Sure
N/A
INFORMATION TECHNOLOGY
89. Is the departments computer
equipment secured to prevent theft?
90. Is access to the computer system
limited to authorized individuals?
91. Are backups of operating systems,
critical data, and key software programs
made on a regular basis and stored at
an off-site location?
92. Are all copies of software used by the
department appropriately licensed?
93. Are virus protection programs used?
94. In case of an emergency, does a
contingency plan exist that would guide
the department on how to continue
operations?
95. Are procedures in place to ensure
awareness and compliance with the use
of computers solely to conduct official
University business?
96. Is access to sensitive and/or
confidential electronic information
restricted to authorized users?
97. Do any department users have the
authority to modify user authorization to
access sensitive and/or confidential
electronic information?
98. Are documented procedures in place to
remove access to all production
systems when an employee terminates
from the University?
COMMENTS