Common Audit Findings

Unlicensed software on department computers
Cash receipts not deposited in accordance with University policy
University assets, including cash, not safeguarded or properly accounted for
Asset handling and accounting responsibilities are not segregated
Written policies and procedures are not updated,maintained or do not exist
Job descriptions are not updated on a regular basis to reflect job responsibilities
Departments maintain external bank accounts, which are not subject to University internal controls
Contracts with outside parties are not properly maintained
University telephones used for personal business and personal long distance phone calls charged to department
Equipment being discarded with no authorization or only verbal authorization
Phishing, which is the attempt to obtain sensitive information by disguising as a trustworthy entity in an electronic communication
IT security protocols not being followed