Reporting Fraud to the Auditor 0003


The purpose of this policy is to provide procedures for handling all suspected incidences of fraud within the University.


This institution establishes the following procedures for reporting fraud to the Internal Auditor.


  • Section §30-138 of the Code of Virginia requires the head of an agency or institution to notify the Auditor of Public Accounts (APA), the State Inspector General, and the Superintendent of State Police of all incidences of fraud within their agency or institution.
  • In addition to compliance with the Code of Virginia, the institution should notify the Office of Internal Audit in cases that circumstances suggest the possibility that assets have, or are thought to have, been lost through fraud or other breaches in the financial and operating systems. Upon such notification, the Director of Internal Audit should ensure that proper authorities within the institution have been notified and that they are aware of the reporting requirements under the Code of Virginia.
  • Although it is not mandatory that Office of Internal Audit investigate each situation, it should be informed and make a judgment regarding the impact of the situation on internal controls and on future audit testing.

Revised and approved by the Board of Visitors, December 4, 2020.