Board of Regents ("Board"): The governing body of Kentucky State University that has ultimate oversight of the University, including approval of the Internal Audit Charter and audit plans.

Audit Committee ("AC"): A committee of the Board of Regents with delegated responsibility for oversight of Internal Audit, risk management, and related compliance activities.

Chief Financial Officer ("CFO"): The University officer responsible for the administrative reporting line of Internal Audit (day-to-day operations), ensuring appropriate coordination with financial and operational matters.

Independence: The freedom from conditions that threaten the ability of Internal Audit to carry out its responsibilities in an unbiased manner, including freedom from undue influence in audit selection, scope, procedures, timing, or reporting.

Objectivity: The unbiased mental attitude that allows Internal Audit to perform engagements in such a manner that audit judgments are not compromised by personal interests or external pressures.

Risk-Based Methodology: A structured approach that prioritizes audit activities by assessing the likelihood and impact of risks on achieving the University's objectives.

Global Internal Audit Standards ("Standards"): The mandatory guidance issued by The Institute of Internal Auditors that establishes the principles and fundamental requirements for the professional practice of internal auditing.

Quality Assurance and Improvement Program (QAIP): An ongoing program maintained by Internal Audit to assess and improve the efficiency and effectiveness of the internal audit function, including periodic internal and external evaluations.

Audit Universe: The comprehensive list of all possible auditable entities, processes, functions, and activities across the University from which the annual audit plan is developed.

PROCESS:

1. Audit Planning

• oInternal Audit develops an annual audit plan using a risk-based methodology, incorporating input from senior management and the Board of Regents/Audit Committee.
• oThe audit plan is submitted to the Board of Regents/Audit Committee for approval.

2. Audit Engagements

• oInternal Audit conducts audits and other engagements as outlined in the approved plan or as requested/authorized by the Board or management.
• oEngagements may include assurance reviews, advisory services, fraud investigations, or process improvement projects.
• oInternal Audit maintains independence and objectivity in selecting scope, procedures, timing, and reporting.

3. Access and Authority

• oInternal Audit has full, free, and unrestricted access to all University property, personnel, and records relevant to the subject under review.