View in Browser
 

Internal Audit and Compliance Quarterly Newsletter

December 2022

Dear University of Miami Coral Gables/Marine Campus Colleagues,

Thank you for engaging with us! The Office of Audit and Advisory Services, in collaboration with University Compliance Services, continues to support and advance the mission of the University, providing our quarterly newsletter as a resource for the UM community. We work with you to foster strong internal controls.

We are proud to successfully partner with faculty and staff members, while maintaining independence and objectivity, as we work together to enhance the University’s controls and processes. We recognize that there is always room for improvement in any operation, and welcome any suggestions you provide as to how our offices can better serve students, faculty, and staff.

Thank you,

Blanca Malagon, VP, Audit and Compliance

 

Hot Topics


 

Compliance Corner

2022 Compliance and Ethics Week Interactive Session – Shining a Light on Title IX Protections

This year's University Compliance Services' annual Compliance and Ethics Week interactive session took place on November 7 via Zoom. Facilitated by Maria Sevilla, Deputy Title IX Coordinator, the session included the importance of understanding what harassment and sexual misconduct are and how to cultivate a culture of compliance. Over 75 participants registered for the virtual presentation. If you missed it, watch the event recording here.


 

University Compliance Updates

The Handbook

The University's Handbook of Business Conduct and Ethical Standards (the handbook) was recently updated and approved by University leadership. The revised version of the handbook was published on various University websites, including the University Compliance Services website, and in the PolicyStat platform system. Both links are listed below:

UDisclose

The enhanced UDisclose System allows faculty, investigators, and staff to disclose their foreign and domestic interests/relationships that might create conflicts of interest, commitment, foreign Influence, or institutional conflicts of interest relative to the users' Institutional Responsibilities at UM. There are several training resources available in Box and ULearn:

For UDisclose System support and questions, please email: OVPRShelpdesk@miami.edu or call 305-243-2314.


 

Data and Internal Audit

Data has become more important for universities to keep ahead of the curve when it comes to not only recruiting students but also maintaining internal controls and being able to detect and prevent internal control issues. This is not a new concept since in 2018 McKinsey & Company reported that, "It is easy to forget that analytics is a beginning, not an end. Analytics is a critical enabler to help colleges and universities solve tough problems—but leaders in higher-education institutions must devote just as much energy to acting on the insights from the data as they do on enabling analysis of the data. Implementation requires significant changes in culture, policy, and processes." Read more here: analytics in education: how colleges and universities can transform outcomes

Today, many universities continue to implement and use analytics to stay ahead; as an example, please review: how the University of Kentucky uses data to stay ahead of higher education trends.


 

Diversity, Equity, and Inclusion (DEI)

Diversity, Equity, and Inclusion (DEI) is important and is embedded in our organization here at the U in line with our DIRECCT values.

As it becomes more important industry wide to embed DEI in the culture of organizations, universities may find it challenging to strategically implement and monitor—from admissions to staff, including recruiting and retention. The field of Internal Audit has grown increasingly aware of the need to apply a DEI lens to Audit and Risk Assessments. Incorporating DEI in audits is not just about a standalone diversity audit, it's about culture. Per The Institute of Internal Auditors (IIA), audits should include DEI components to continuously assess this instead of waiting for something to happen. For example, culture risks assessed in regular audits could include Talent, Facilities' disabilities accommodations compliance, KPIs, use of endowment funds, and use of federal funds for contractor awards.

According to the IIA, a new report, "Diversity, Equity, and Inclusion 101: Internal Audit's Invaluable Role in Creating a Sense of Belonging at Work," from the Internal Audit Foundation and Deloitte, explains why it's essential for Internal Audit to be more involved in the organization's Environmental, Social, and Governance (ESG) efforts, and helps you get started today with tangible action items to add value and improve outcomes of DEI initiatives." Here are some takeaways:

  1. Definitions of key terms like diversity, equity, inclusion, and anti-oppression are provided to help navigate confusing and often misused terminology.
  2. Internal Audit's opportunity and obligation to foster a diverse, equitable, and inclusive culture starts within its own function.
  3. Establishing metrics and monitoring the DEI program are critical actions to ensure the program is meeting strategic objectives.
  4. Organizations need new ways to identify and manage DEI risks and examine business processes to expose strengths and deficiencies.
  5. Take the first steps on how to address DEI efforts as an assurance provider, trusted advisor, or agent of change.

Download the full report here.


 

Internal Controls Self-Assessment

Feel free to access our internal controls self-assessment as a valuable tool to help identify internal control gaps and assist in departmental management and audit preparation. The self-assessment consists of a series of "yes" or "no" questions. "Yes" indicates adequate controls in an area, while "no" indicates potential control gaps that should be addressed. Please reach out to Audit and Advisory Services with any questions or for an opportunity to help assess your area.

The self-assessment can be accessed here. For questions not addressed in the self-assessment, please contact us.


 

Fighting Fraud

University Hotline

The University Hotline is a comprehensive and confidential reporting tool to address fraud, abuse, and misconduct related to University policies and procedures, and concerns about violations of irregularities or improprieties. The University Hotline is available to any individual who wishes to report a concern and one can choose to remain anonymous while doing so.

The University Hotline is not 911 or an emergency service, and is not intended to be used as a vehicle for resolving workplace disagreements or addressing communication issues between employees and their managers. These types of concerns should be handled with your supervisor or with your HR Client Services representative. In addition, there are various reporting tools available for students (undergraduate, graduate/doctoral, medical) to "Report a Concern" via the Student Affairs Dean of Students website or the MSOM Office of Graduate Studies website. See the NavexGlobal/EthicsPoint FAQ's for additional information.

University employees who report an activity in good faith that may be in violation of a law, rule, or regulation are protected against retaliation by the University's Whistleblower Protection Statement.

To make a Hotline report: Visit university-hotline.ethicspoint.com or call 877-415-4357.