The primary role of the University's Internal Audit Service is to provide assurance to senior management, the Audit Committee and to the University Council about the adequacy and effectiveness of the risk management, control and governance processes in operation. This assurance takes the form of an annual written opinion.

The secondary role of the Internal Audit Service is to strengthen and improve the risk management, control and governance framework within the University through the promulgation of good practice. This is achieved by carrying out a planned programme of risk-based system reviews together with consultancy work and ad-hoc exercises. The precise scope of internal audit work can vary from one assignment to the next but, as a minimum, includes reviewing and reporting upon:

a) the control environment as a whole, i.e. how management directs and controls the business;
b) the process by which risks, i.e. threats to the business, are identified and analysed;
c) the adequacy and effectiveness of the controls in place for managing risks;
d) the reliability and integrity of corporate management information;
e) the compliance with relevant policies, procedures, laws and regulations;
f) the safeguarding of assets;
g) the economic, efficient and effective use of resources; and
h) the accomplishment of planned objectives and goals.

Terms of Reference and Strategy (UniS Staff access only)

Audit Committee (UniS Staff access only)