R565-1. Purpose: To provide for the functions and responsibilities of audit committees within the Utah System of Higher Education (System).

R565-2. References

2.1. Utah Code §53B-6-102 (Standardized Systems Prescribed by the Board)

2.2. Utah Code §53B-7-101 (Financial Affairs Under the General Supervision of the Board)

2.3. Utah Code §63I-5 (Utah Internal Audit Act)

2.4. Board Policy R561, Accounting and Financial Controls

2.5. Board Policy R567, Internal Audit Program

2.6. Institute of Internal Auditors, International Standards for the Professional Practice of Internal Auditing (IIA Standards)

R565-3. Audit Committees

3.1. The Board of Higher Education shall establish and maintain a Board Audit Subcommittee as a standing subcommittee of the Finance and Facilities Committee.

3.2. Creation of Trustee Audit Committees: Each Board of Trustees shall create a standing Audit Committee to assist the full board in overseeing financial matters and to oversee institutional internal audit activities, in accordance with the Internal Audit Act and IIA Standards.

R565-4. Board and Trustee Audit Committee Charters

4.1. The Board Audit Subcommittee and institution boards of trustees audit committees shall establish respective audit charters that outline their purpose, authority, and responsibilities. The audit charters shall grant appropriate access to data, information, records, and personnel needed to conduct audit activities.

4.2. Authority

4.2.1. Board of Higher Education Audit Subcommittee: The Board of Higher Education Audit Subcommittee shall provide advice and recommendations to the Board of Higher Education regarding oversight and internal controls of the system and individual intuitions. Although the Board of Higher Education Audit Subcommittee is not vested with decision making authority on behalf of the Board of Higher Education, the Board of Higher Education Audit Subcommittee has authority to:

4.2.1.1. Access any and all data, information, records, and personnel to fulfill its purpose and responsibilities;

4.2.1.2. Confer with external auditors, legal counsel, and others as necessary; and

4.1.2.3. Conduct or authorize investigations into any matters considered necessary to achieve its purpose.

4.2.2. Trustee Audit Committee: Trustee audit committees shall provide advice and recommendations to the Board of Trustees regarding institutional oversight and internal controls. Although trustee audit committees are not vested with decision making authority on behalf of the board of trustees, the trustee audit committee has authority to:

4.2.2.1. oversee the internal audit activities within the institution;

4.2.2.2. confer with external auditors, legal counsel, and others as necessary;

4.2.2.3. assist in resolving disagreements between institutional representatives and external auditors;

4.2.2.4. access any and all data, information, records, and personnel to fulfill its purpose and responsibilities;

4.2.2.5. conduct or authorize investigations into any matters considered necessary to achieve its purpose; and

4.2.2.6. consult with institutional representatives, the board of trustees, and the Board of Higher Education Audit Subcommittee concerning the adequacy of the institution’s internal audit activities, staffing levels, and internal controls.

4.3. Committee Membership

4.3.1. Board of Higher Education Audit Subcommittee: The Board of Higher Education Audit Subcommittee shall consist of at least three but no more than five members, including at least three members of the Board of Higher Education. The Chair of the Board will appoint the subcommittee chair and members. When practicable, at least one of the committee members should have financial expertise either through professional certification or experience.

4.3.2. Trustee Audit Committee: The trustee audit committee shall consist of at least three but no more than five members, including at least three members of the board of trustees. The Committee members will be appointed by the trustee chair. Unless a committee chair is appointed by the board chair, the members of the committee may designate a chair by majority vote. When practicable, at least one of the committee members should have financial expertise either through professional certification or experience.

4.4. Meetings

4.4.1. Board of Higher Education Audit Subcommittee: The subcommittee shall meet at least three times per year to review audit activities. The subcommittee may meet with boards of trustees, institutional administrators, and auditors. Board of Higher Education staff shall prepare and provide meeting agendas along with appropriate briefing materials.

4.4.2. Trustee Audit Committee: The committee shall meet at least three times a per year, with additional meetings as needed. The committee may invite institutional administrators, auditors, and others to attend meetings and provide pertinent information. Meeting agendas will be prepared and provided in advance to members, along with appropriate briefing materials. Informal minutes will be prepared.

4.5. Responsibilities

4.5.1. The Board of Higher Education Audit Subcommittee shall:

4.5.1.1. Schedule meetings and correspondence as necessary to maintain regular, independent communication and information flow between the Board of Higher Education Audit Subcommittee and trustee audit committees (via trustee chairs and trustee audit committee chairs).

4.5.1.2. Receive and review reports from trustee audit committees (via trustee chairs and trustee audit committee chairs) regarding the annual financial statements, including a summary of significant accounting and reporting issues.

4.5.1.3. Receive and review reports from trustee audit committees (via trustee chairs and trustee audit committee chairs) regarding the results of the annual financial statement audit, including audit scope and approach, any restrictions on the auditor’s activities or on access to requested information, and any significant disagreements with institutional representatives.

4.5.1.4. Receive and review reports from the system audit director and institution auditors regarding the control environment, means of communicating standards of conduct, and practices with respect to risk assessment and risk management. 

4.5.1.5. Receive and review reports from the system audit director and institution auditors regarding systems of internal control. 

4.5.1.6. Receive and review reports from institutions regarding the receipt, retention, and treatment of complaints, including anonymous complaints about accounting, auditing, internal control, and other related issues. 

4.5.1.7. Review reports from the system audit director and institution auditors regarding systems for monitoring compliance with all applicable laws and regulations.

4.5.1.8. Obtain regular updates from institutions regarding instances of material noncompliance that might have implications for the System. 

4.5.1.9. Receive annual summary reports from trustee audit committees (via trustee chairs and trustee audit committee chairs) regarding the results of the internal auditing program at each institution, including any restrictions and limitations on internal auditing activities. 

4.5.1.10. At least annually, the subcommittee will provide a report or minutes of meetings to the full Board of Higher Education detailing the Committee’s activities and recommendations.

4.5.2. The Trustee Audit Committee shall:

4.5.2.1. Schedule meetings and correspondence as necessary to maintain regular, independent communication and information flow between the trustee audit committee and external auditors.

4.5.2.2. Review the institution’s financial statements, including significant accounting and reporting issues. This includes reviewing the management discussion and analysis of the financial statements, along with any analyses prepared by institutional administration and/or external auditors setting forth significant financial reporting issues and judgments made in connection with the preparation of the financial statements.

4.5.2.3. Review with the administration and the external auditors the results of the annual financial statement audit, including audit scope and approach, any restrictions on the auditor’s activities or on access to requested information, and any significant disagreements with institutional representatives.

4.5.2.4. Review information regarding the institution’s control environment, means of communicating standards of conduct, and practices with respect to risk assessment and risk management.

4.5.2.5. Confer with external and internal auditors regarding the quality of institutional systems of internal control.

4.5.2.6. Review information regarding the receipt, retention, and treatment of complaints, including anonymous complaints about accounting, auditing, internal control, and other related issues.

4.5.2.7. Review with campus administrators and other institutional representatives the adequacy of the institution’s auditing personnel, staffing levels, and controls.

4.5.2.8. Review information provided by the administration regarding systems for monitoring compliance with all applicable laws and regulations.

4.5.2.9. Obtain regular updates from institutional administrators and/or legal counsel regarding instances of material noncompliance that might have implications for the institution.

4.5.2.10. Review with the administration and the chief internal audit executive the charter, plans, activities, staffing and organizational structure of the internal audit function.

4.5.2.11. Review any restrictions and limitations on internal auditing activities.

4.5.2.12. Appoint, evaluate performance, if necessary, dismiss the institution’s chief internal audit executive.

4.5.2.13. Receive and review internal audit reports and/or periodic summaries of internal audit activities prepared by the chief internal audit executive.

4.5.2.14. Schedule meetings and correspondence as necessary to maintain regular, independent communication and information flow between the committee and the institution’s chief internal audit executive.

4.6. Reporting

4.6.1. Board of Higher Education Audit Subcommittee

4.6.1.1. At least annually, the subcommittee will provide a report or minutes of meetings to the full Board of Higher Education detailing the Committee’s activities and recommendations.

4.6.2. Trustee Audit Committee

4.6.2.1. At least annually, the committee shall provide a report or minutes of meetings to the full Board of Trustees detailing the Committee’s activities and recommendations.

4.6.2.2. The trustees chair and trustees audit committee chair shall meet at least annually with the Board of Higher Education Audit Subcommittee to provide updates on the institutional activities required by this policy.

4.6.2.3. The committee shall prepare an annual report summarizing internal and external audit results from the prior year and an audit plan for the upcoming year. This report shall be submitted to the Board of Higher Education audit director no later than five business days before the annual Board of Higher Education Audit Subcommittee meeting.

Adopted November 22, 1977, amended June 27, 1978, September 2, 1999, March 18, 2005, March 9, 2007, October 29, 2010, March 31, 2017, and November 16, 2018.