KENTUCKY STATE UNIVERSITY SCHEDULE OF FINDINGS AND RESPONSES June 30, 2017

Finding 2017-002 – Controls Over Payroll Procedures

Criteria: Management is responsible for having adequate internal controls in place surrounding key processes.

Condition: During the current year audit, the University did not have adequate internal controls over payroll procedures.

Context: During the current year audit, the following issues relating to payroll were identified:

• Employees who are required to submit time sheets are not
• Completed time sheets are not properly approved by a supervisor
• Vacation leave is not being properly reported to payroll via time sheets
• Leave time not being taken in accordance with University policy
• Withholdings not tracked and remitted to appropriate agencies in a timely manner resulting in inaccuracies and additional payments for penalties
• Improper classification of employees related to retirement plans
• Former employees being paid benefits after termination
• Current employees not having appropriate withholding from payroll for benefits
• No documentation of required levels of approval of new hires, promotions or pay rate changes
• No payroll change reports processed or reviewed by someone independent of payroll

Effect: Not having reliable controls in place in regards to the payroll process can affect the financial statement information. This weakness in accounting infrastructure increases the risk of errors in the financial records and is less likely to detect irregularities, including fraud on a timely basis.

Cause: The above condition appears to be the result of a lack of internal controls and segregation of duties within payroll procedures.

Recommendation: We recommend the University review internal controls surrounding payroll procedures to ensure adequate segregation of duties and proper approvals are established and documented. Further, all supporting documentation including pay rate approvals and timesheets should be maintained.

Views of responsible officials and planned corrective action: Management agrees with the finding. Internal controls surrounding payroll procedures will be reviewed and strengthened to ensure adequate segregation of duties, maintenance of supporting documentation, compliance with payroll procedures and accurate and timely reporting.

50.