Utah Code § 63I-5-401

Duties and powers of the agency internal audit director
Open in Lexace · Ask the AI about this section
(1) The agency internal audit director shall:
(a) furnish independent analyses, appraisals, and recommendations that may, depending upon
the audit scope, identify:
(i) the adequacy of the state agency's systems of internal control;
(ii) the efficiency and effectiveness of agency management in carrying out assigned
responsibilities; and
(iii) the agency's compliance with applicable laws, rules, and regulations;
(b) submit audit reports directly to the agency head and to the audit committee, if one has been
established;

(c) conduct internal audits of state agency programs, activities, and functions that may consist of
one or more of the following objectives:
(i) to verify the accuracy and reliability of agency records;
(ii) to assess compliance with management policies, plans, procedures, and regulations;
(iii) to assess compliance with applicable laws, rules, and regulations;
(iv) to evaluate the efficient and effective use of agency resources; and
(v) to verify the appropriate protection of agency assets;
(d) prepare audit reports of findings;
(e) review and evaluate internal controls over the state agency's accounting systems,
administrative systems, electronic data processing systems, and all other major systems
necessary to ensure the fiscal and administrative accountability of the state agency;
(f) develop audit plans containing the information required by Subsection (2) to be based on the
findings of periodic risk assessments;
(g) upon request, make a copy of the approved audit plan available to the state auditor,
legislative auditor, or other appropriate external auditor to assist in planning and coordination
of any external financial, compliance, electronic data processing, or performance audit;
(h) determine the scope and assignment of the audits;
(i) perform an audit of a special program, activity, function, or organizational unit at the direction
of the agency head or, if one has been established, an audit committee;
(j) maintain the classification of any public records consistent with Title 63G, Chapter 2,
Government Records Access and Management Act;
(k) be subject to the same penalties as the custodian of those public records for violating Title
63G, Chapter 2, Government Records Access and Management Act; and
(l) identify in the audit report any abuse, illegal acts, errors and omissions, or conflicts of interest.
(2)
(a) The audit plan required by this section shall:
(i) identify the individual audits to be conducted during each year;
(ii) identify the related resources to be devoted to each of the respective audits;
(iii) ensure that internal controls are reviewed periodically as determined by the agency head or
the audit committee, if one has been established; and
(iv) ensure that audits that evaluate the efficient and effective use of agency resources are
adequately represented in the plan.
(b) The agency internal audit director shall submit the audit plan to the agency head and the audit
committee, if one has been established, for approval.
(3) The agency internal audit director shall ensure that:
(a) all reports of audit findings issued by internal audit staff shall include a statement that the
audit was conducted according to the appropriate standards;
(b) public release of reports of audit findings comply with the conditions specified by the state
laws and rules governing the state agency;
(c) copies of all reports of audit findings issued by the internal audit staff are available, upon
written request, to the Offices of the Legislative Auditor General and the Office of the State
Auditor; and
(d) significant audit matters that cannot be appropriately addressed by the agency internal audit
office are referred to either the Office of Legislative Auditor General or the Office of the State
Auditor.
(4) The agency internal audit director may contract with consultants to assist with audits.

‹ Prev All Utah sections Next ›


Lexace provides legal information, not legal advice, and no attorney–client relationship is created. Statute text is provided for general information and may not reflect the most recent amendments; verify against the official state code.