To uphold our responsibilities and accomplish the objectives established in our audit charter, the Internal Audit Division performs a variety of engagements depending on the circumstances and senior management’s needs.
The following audit services are provided by the Internal Audit Division:
Operational Audits Operational audits are systematic reviews of effectiveness, efficiency and economy of Department programs and processes. They are future-oriented evaluations with the primary focus being standard operating procedures and achievements related to Department/Division objectives.
Fiscal Control Audits Fiscal control audits are limited scope reviews with a primary focus on controls that can impact financial statement assertions (Existence or Occurrence, Completeness, Rights and Obligations, Valuation or Allocation, Presentation and Disclosure).
Compliance Audits Compliance audits measure the Department’s, contractor’s and grantees’ compliance with established Federal, State and Department laws, rules, regulations, contracts and policies.
Information Technology Audits Information technology (IT) audits evaluate the quality of controls and safeguards over information technology resources, policies, operations and critical data maintained by the Department. These audits consist of reviewing the effective use of information technology resources, adherence to State and Department IT policies and assessing the design and implementation of internal controls over computer applications and the computing environments in which they are used against professional IT frameworks.
Integrated Audits Integrated audits are wholistic engagements that address multiple objectives (Strategic, Operational, Reporting, Compliance) in assessing a division, section, program or process. The majority of the Internal Audit Division’s audits are integrated due to the enhanced level of assurance we are able to provide to our clients.
Follow-Up Audits Follow-up audits evaluate the adequacy, effectiveness and timeliness of actions taken by management concerning reported high-risk observations.
Special Investigations Special investigations focus on matters such as allegations of theft, noncompliance with laws/rules/regulations, misuse of resources, abuse of power, falsification of records, bribery, conflicts of interest and/or waste.
Data Analytics Data analytics engagements involve a systematic process through which we gather data, assess the quality of the data, cleanse the data, perform analyses and provide the results to management for informed decision making.
Consultations/Advisory Services Advisory and related client service activities, the nature and scope of which are agreed upon with the client, are intended to add value and improve an organization’s governance, risk management and control processes without the internal auditor assuming management responsibility. Examples include counsel, advice, facilitation and training.
Assistance to the Office of the State Auditor The Internal Audit Division aids the North Carolina Office of the State Auditor (OSA) upon request. These duties may involve the following:
- Assisting with investigations,
- Assessments of internal controls and
- Reviewing inventories of critical Department assets.