63I-5-401 - Duties of the agency internal audit director.

63I-5-401. Duties of the agency internal audit director.
(1) The agency internal audit director may:
(a) furnish independent analyses, appraisals, and recommendations that may, dependingupon the audit scope, identify:
(i) the adequacy of the state agency's systems of internal control;
(ii) the efficiency and effectiveness of agency management in carrying out assignedresponsibilities; and
(iii) the agency's compliance with applicable laws, rules, and regulations;
(b) submit audit reports directly to the agency head and to the audit committee, if one hasbeen established;
(c) conduct internal audits of state agency programs, activities, and functions that mayconsist of one or more of the following objectives:
(i) to verify the accuracy and reliability of agency records;
(ii) to assess compliance with management policies, plans, procedures, and regulations;
(iii) to assess compliance with applicable laws, rules, and regulations;
(iv) to evaluate the efficient and effective use of agency resources; and
(v) to verify the appropriate protection of agency assets;
(d) prepare audit reports of findings;
(e) review and evaluate internal controls over the state agency's accounting systems,administrative systems, electronic data processing systems, and all other major systems necessaryto ensure the fiscal and administrative accountability of the state agency;
(f) develop audit plans containing the information required by Subsection (2) to be basedon the findings of periodic risk assessments;
(g) upon request, make a copy of the approved audit plan available to the state auditor,legislative auditor, or other appropriate external auditor to assist in planning and coordination ofany external financial, compliance, electronic data processing, or performance audit;
(h) determine the scope and assignment of the audits;
(i) perform an audit of a special program, activity, function, or organizational unit at thedirection of the agency head;
(j) maintain the classification of any public records consistent with Title 63G, Chapter 2,Government Records Access and Management Act;
(k) be subject to the same penalties as the custodian of those public records for violatingTitle 63G, Chapter 2, Government Records Access and Management Act; and
(l) identify in the audit report any abuse, illegal acts, errors and omissions, or conflicts ofinterest.
(2) (a) The audit plan required by this section shall:
(i) identify the individual audits to be conducted during each year;
(ii) identify the related resources to be devoted to each of the respective audits;
(iii) ensure that internal controls are reviewed periodically as determined by the agencyhead or the audit committee, if one has been established; and
(iv) ensure that audits that evaluate the efficient and effective use of agency resources areadequately represented in the plan.
(b) The agency internal audit director shall submit the audit plan to the agency head andthe audit committee, if one has been established, for approval.
(3) The agency internal audit director shall ensure that:


(a) audits are conducted in accordance with professional auditing standards such as thosepublished by the Institute of Internal Auditors, Inc., the American Institute of Certified PublicAccountants and, when required by other law, regulation, agreement, contract, or policy, inaccordance with Government Auditing Standards, issued by the Comptroller General of theUnited States;
(b) all reports of audit findings issued by internal audit staff shall include a statement thatthe audit was conducted according to the appropriate standards;
(c) public release of reports of audit findings comply with the conditions specified by thestate laws and rules governing the state agency;
(d) copies of all reports of audit findings issued by the internal audit staff are available tothe Offices of the Legislative Auditor General and the State Auditor upon request; and
(e) significant audit matters that cannot be appropriately addressed by the agency internalaudit office are referred to either the Office of Legislative Auditor General or the Office of theState Auditor.

Renumbered and Amended by Chapter 382, 2008 General Session