Institutional Compliance and Internal Audit staff works with departments across campus to assist management in improving the effectiveness and efficiency of University operations and complying with federal and state requirements and DU policies.

We conduct audits to measure the strength of internal controls and identify any gaps that may put the University at unnecessary or unacceptable risk.

Each year, we analyze the relative risk of various University operations. We create an audit plan, which we discuss with our Board of Trustees, the chancellor and others to determine which areas we will focus on in the upcoming fiscal year.

Learn more about how we choose what to audit. 

If we choose to audit your operations, we’ll discuss that with the senior management of the area. You can find details about the auditing process on the Internal Audit page of this site.

Audits can range from days to several months. If we choose to audit your operations, we’ll give your area’s management an estimate of how long we expect the review to take during our audit planning. We’ll also update you throughout the audit process, and we’ll let you know of any changes in the timeline.

Sometimes areas would like objective assistance with a particular process or question. You can reach the Institutional Compliance and Internal Audit staff by emailing us. 

ERM is a process that allows the University to identify, analyze, monitor and control key risks from an enterprise-wide viewpoint. It also enables the University to continuously improve the way we respond to changes in our environment. The Executive Risk and Compliance Committee serves as the steering committee for ERM efforts, and the Office of Institutional Compliance and Internal Audit facilitates the process.

Each year, ICIA distributes the Conflict of Commitment and Interest questionnaire to officers, deans and directors. (Similarly, the Office of the Chancellor distributes questionnaires annually to trustees.)

Per University Policy, any DU employee in a potential conflict of interest or commitment must report the conflict to their supervisor. The policy describes the responsibility of employees and their supervisor.

Any University official who reviews the employee’s report must provide all relevant information to the director of Institutional Compliance and Internal Audit.

Visit our “Report Suspicious or Improper Activity” page to learn how to anonymously alert our office to concerns about accounting, internal control, compliance and auditing matters.