Internal Audit

During an internal audit

Each audit is different, but most involve the following steps:

  • an initial meeting with managers in the area to be reviewed to discuss the scope and timing of the audit
  • discussions with staff and review of documentation to gain an understanding of systems and processes
  • tests to check how systems are working in practice
  • identification and consideration of areas for improvement
  • preparation of draft report and discussion with managers
  • issue of final report including issues identified and management actions
  • follow up monitoring of management actions response to identified issues.


The information gathered from the initial meetings, discussions and tests will influence our assessment of the systems under review and the effectiveness of controls in place. Fieldwork will normally be scheduled to fit in as conveniently as possible for you and your team.

We will be open with you about issues identified through our work as the audit progresses. This is important as managers are well placed to help determine the best ways of resolving issues. The most effective reviews occur when staff are willing to share their knowledge and experience.

During the audit we will discuss findings and possible remedial actions as they emerge and will work with you to identify appropriate practical and cost-effective solutions.

We will evaluate the findings from our audit work and assess whether actions adopted by management fully address the identified risks.

Minimising disruption during an audit

We consider departmental work patterns when scheduling audits and try to avoid times of peak workloads and minimise disruption and work with line managers to work around the other demands placed on departments wherever possible.

We do have the right of access to all of the University's records, information and assets which we consider necessary to fulfil our responsibilities.