|
Preventative | Designed to keep errors or irregularities from occurring. Two common examples of this are regulations and segregation of duties. |
Detective | Designed to detect errors or irregularities that have already occurred. One of the most common examples of this is review processes. |
Corrective | Designed to correct errors or irregularities that have been detected. An example of this is the procedure or procedures in place to handle detected situations. In addition, a corrective control in place may be to add a preventive or detective control so the irregularity or error doesn't reoccur. |
In general, internal controls are considered to be a good thing for an organization, however, it is possible to have too many controls to the point where operations become inefficient. Examples could include the creation of redundant procedures or having too many approvals. These types of issues should be reported to Internal Audit using the "Other" category as described in Reporting Issues to Internal Audit.
If you are a member of the University community, we've put together a helpful set of tips to understand how you can support ENMU excellence.
Even if you are not a member of the University community, you can still help ENMU by reporting issues that don't seem to support the high standard of learning and excellence that ENMU should exemplify.
There are several types of issues to report to Internal Audit and some to report to other areas within the University.
Reporting Issues to Internal Audit
Audits are determined based on a variety of reasons:
Specific Risk | Something specific has been identified either by the internal auditor, or another individual has reported a concern to Internal Audit that may warrant a more thorough review. |
General Risk | Certain areas are generally considered risky to an auditor, and new areas arise every year. These can include: internal controls over processes, compliance with policies and procedures, segregation of duties, and cash handling. |
Follow-up | When audit findings have been issued, follow-up audits are necessary to determine if they have been corrected or if further action is required. |
Time Based | These audits are determined based on the last time they were audited, if they ever have been. It provides an opportunity to look into internal controls as well as compliance with laws and regulations to ensure operations are running effectively and efficiently. |
Once an audit has been approved, the audit process begins.
ENMU Station 9
1500 S Ave K
Portales, NM 88130
Office: Quay Hall, Room 115
Phone: 575.562.2218
Email: jessica.small@enmu.edu