Skip navigation
Frequently Asked Questions

Internal Audit

Frequently Asked Questions

What does the Office of Internal Audit do?

Internal Audit staff work with departments across campus to assist management in improving the effectiveness and efficiency of University operations and complying with federal and state requirements and DU policies.

We conduct audits to measure the strength of internal controls and identify any gaps that may put the University at unnecessary or unacceptable risk.

How do you choose which departments to audit?

Each year, we analyze the relative risk of various University operations. We create an audit plan, which we discuss with our Board of Trustees, the chancellor and others to determine which areas we will focus on in the upcoming fiscal year.

Learn more about how we choose what to audit

My department is being audited. What do I need to do, and what should I expect?

If we choose to audit your operations, we’ll discuss that with the senior management of the area. You can find details about the auditing process on the Internal Audit page of this site.

How long does an audit take?

Audits can range from days to several months. If we choose to audit your operations, we’ll give your area’s management an estimate of how long we expect the review to take during our audit planning. We’ll also update you throughout the audit process, and we’ll let you know of any changes in the timeline.

How do I request assistance from Internal Audit?

Sometimes areas would like objective assistance with a particular process or question. You can reach the Internal Audit staff by emailing us. 

What is the Enterprise Risk Management (ERM) Program?

ERM is a process that allows the University to identify, analyze, monitor and control key risks from an enterprise-wide viewpoint. It also enables the University to continuously improve the way we respond to changes in our environment. The Executive Risk and Compliance Committee serves as the steering committee for ERM efforts, and the Office of Internal Audit facilitates the process.

What is the Conflict of Commitment and Interest assessment?

Each year, Internal Audit distributes the Conflict of Commitment and Interest questionnaire to officers, deans and directors. (Similarly, the Office of the Chancellor distributes questionnaires annually to trustees.)

Per University policy, any DU employee in a potential conflict of interest or commitment must report the conflict to their supervisor. The policy describes the responsibility of employees and their supervisor.

Any University official who reviews the employee’s report must provide all relevant information to the Director of Internal Audit.

I’d like to report suspicious activity or practices. How do I file a report?

Visit our “Report Suspicious or Improper Activity” page to learn how to anonymously alert our office to concerns about accounting, internal control, compliance and auditing matters.