Internal Audit
The Office of Internal Audit was established as a service to both management and the Audit Committee of the Board of Trustees. Its purpose is to provide assurance that the internal control systems operate smoothly throughout Touro University and its affiliates. Feel free to contact us if you have any questions or would like our assistance.
Internal Audit Mission
The mission of internal audit is to enhance and protect organizational value by providing risk-based and objective assurance, advice, and insight.
Internal Audit Department Goals
The Internal Audit Department aims to enhance organizational effectiveness by providing independent, objective assurance and advisory services. Key goals include improving risk management processes, ensuring regulatory compliance, and promoting a culture of accountability across all departments.
Objectivity
The chief audit executive will ensure that the internal audit function remains free from all conditions that threaten the ability of internal auditors to carry out their responsibilities in an unbiased manner, including matters of engagement selection, scope, procedures, frequency, timing, and communication. If the chief audit executive determines that objectivity may be impaired in fact or appearance, the details of the impairment will be disclosed to appropriate parties. Internal auditors will maintain an unbiased mental attitude that allows them to perform engagements objectively such that they believe in their work product, do not compromise quality, and do not subordinate their judgment on audit matters to others, either in fact or appearance. Internal auditors will have no direct operational responsibility or authority over any of the activities they review. Accordingly, internal auditors will not implement internal controls, develop procedures, install systems, or engage in other activities that may impair their judgment, including:
- Assessing specific operations for which they had responsibility within the previous year.
- Performing operational duties for [name of organization] or its affiliates.
- Initiating or approving transactions external to the internal audit function. Directing the activities of any [name of organization] employee that is not employed by the internal audit function, except to the extent that such employees have been appropriately assigned to internal audit teams or to assist internal auditors.
Internal auditors will:
- Disclose impairments of independence or objectivity, in fact or appearance, to appropriate parties and at least annually, such as the chief audit executive, board, management, or others.
- Exhibit professional objectivity in gathering, evaluating, and communicating information.
- Make balanced assessments of all available and relevant facts and circumstances.
- Take necessary precautions to avoid conflicts of interest, bias, and undue influence.
What We Do
The Internal Audit Department improves TUS’ operations by focusing on aspects of governance, risk, and compliance. Independent and objective, the Department works closely with our auditees and the individuals we service in order to build long-term relationships and develop a better understanding of the business and operational issues they face.
Our team is comprised of highly trained individuals who possess extensive business and industry expertise, technical acumen, and the ability to identify and analyze key risks and apply best practices based on mutual understanding of audit and business needs. We combine process and system benchmarking experience with organizational knowledge.
The Internal Audit team provides services in the areas of strategy, operations, technology, risk, compliance, and investigations.
- Operational, Compliance and Information Technology Audits assess operational efficiencies and effectiveness; reliability of financial and operational systems; adequacy and clarity of policies and procedures; compliance with university policy and state and federal law; and the proper safeguarding of TUS assets. Such projects included but not limited to: Human Resources, Information Security, HIPAA Compliance
- Advisory Services offer advisory support and other service activities which include: counsel, advice, facilitation, and specialized training tailored to the development or modification of processes, procedures, and controls that mitigate risk. Such projects include but are not limited to: Enterprise Risk Management, and Special Projects.
- Investigations evaluate allegations of fraudulent business practices and/or misconduct involving financial or operational matters. They determine if allegations are substantiated, and prevent or mitigate future fraudulent activity.