Internal Audit Department University of Virginia
Mailing Address:
P.O. Box 400190
Charlottesville, VA
22904-4190
Physical Address:
1001 N. Emmet St.
Carruthers Hall, 2nd Floor
Charlottesville, VA 22904

Compliance Audit Program Summary

I. Planning
  1. Conflict of Interest Statement
  2. Internal Controls Questionnaire
  3. Entrance Memo
  4. Hold Entrance Conference
  5. Print required Discoverer Reports

II. Petty Cash
  1. Identify Petty Cash accounts
  2. Conduct a Petty Cash count
  3. Complete Petty Cash Internal Control Questionnaire
  4. Select Petty Cash expenditures
  5. Select bank statements

III. Reconciliations
  1. Appropriate reports printed and on file
  2. Internal Controls Questionnaire
  3. Evidence of a timely review (date)
  4. Appropriate persons (Preparer and Approver)
  5. Grant expenditures

IV. Timekeeping
  1. Employee’s supervisor (Structure and employee type)
  2. Assigned Timekeeper responsibility
  3. Assigned Primary and Back-up Timekeepers
  4. Timekeeper’s Internal Controls Questionnaire
  5. Non-Exempt employee timecards not submitted
  6. Exempt employee timecards not submitted
  7. Unapproved Timecards by management
  8. Timekeeping recorded on paper timesheets

V. P-Card
  1. Select P-Cardholders
  2. Verify current P-Card training
  3. Review P-Card monthly statements for timely reconciliation
    1. Did transactions fit the department’s mission
    2. Reconciled timely
    3. Cardholder’s signature and date
    4. Approved by person of authority and dated
  4. Review P-Card transactions
    1. Charge slip or other documentation
    2. Expenditure type classification
    3. Match date of purchase and descriptions against report
    4. Ensure expenditures are unrestricted purchases

VI. Purchasing
  1. Identify employees with PO Purchaser Responsibility
  2. Review departmental supporting documentation
    1. Filed to allow for a prompt retrieval and in a secure area
    2. Review supporting documentation (receipt, charge slip, packing slip, etc.)
    3. Match dollar amount and descriptions against report
    4. Review restricted items for appropriate approval
    5. Expenditure type classification
    6. Note strange expenditures for reasonableness and necessity
    7. Approved by person of authority and date

VII. Cash Receipts
  1. Cash Receipt Internal Control Questionnaire
  2. Review supporting documentation for the deposit
  3. Timeliness of deposit based on date of receipt
  4. Timeliness and accuracy (dollar amount) of deposit recorded in the General Ledger

VIII. General Security and Miscellaneous Items
  1. Passwords kept out of site
  2. Attendance at Fiscal Administrator’s meetings

IX. Reporting
  1. Write issues
  2. Obtain managements approval of issues
  3. Issue draft report
  4. Conduct an exit conference and document
  5. Obtain verbal approval to issue in final form
  6. Issue report in final form editing as necessary
  7. Document adequacy of management’s response