Letter from the President – Fall 2024

Dear ACUA Colleagues,

I am honored and excited to address you as the newly appointed ACUA President. As I step into this role, I am filled with a deep sense of responsibility and commitment to continue the legacy of excellence that ACUA represents. First and foremost, I would like to extend my heartfelt gratitude to my predecessor, Marion Candrea, for her outstanding leadership and dedication.

I am eager to continue to work alongside our talented board members, dedicated volunteers, and all of you—our valued members. Together, we will strive to enhance our professional development programs, expand our resources, and foster a community where knowledge and best practices are shared freely.

It was great to see so many of you at AuditCon 2024 in Atlanta, where we achieved a record-breaking 508 attendees! I sincerely thank our Professional Education Committee, speakers, strategic partners, exhibitors, and the ACUA Staff. The in-person interactions and sharing of knowledge were very inspiring and uplifting. We look forward to seeing everyone again in Oklahoma City from March 9-12 for Audit Interactive! Be on the lookout for information on the amazing content coming your way very soon!

I’d also like to give a huge congratulations to the Website Redesign Task Force, the Logo Refresh Task Force, and the ACUA Staff for their astonishing work this past year. The new ACUA website is a breath of fresh air. I hope all our ACUA Members find the navigation to ACUA’s resources more streamlined and user-friendly.

Finally, I’d like to thank our members who completed the Member Needs Assessment Survey this past summer. The responses will be instrumental as the board comes together in the spring to create ACUA’s Strategic Planning for 2025 – 2027. I encourage you to share additional ideas, feedback, and aspirations with me and the board. Together, we will make ACUA an even stronger and more vibrant organization.

Thank you for your trust and support. I look forward to serving you and working together to advance our profession.

Wishing you all a very happy and prosperous holiday season.

Laura Buchhorn, University of Texas at San Antonio

ACUA President

Letter from the Editor – Fall 2024

Unintentionally, this issue has a theme of seeing things in a new light. Changes so subtle that they could be missed, but the trained auditor eye will take notice.

Consider the new ACUA logo and brand identity. My favorite part of the design is the shield, purposefully representing auditors as protectors of our institutions. The network symbol also reminds us that we are stronger when we network with each other, as when members share their knowledge by replying to ConnectACUA posts.

In this issue, ACUA’s Outstanding Professional Contributions award winner, John McDaniel, challenges us to review policies and procedures in a new light to improve clarity and remove barriers to compliance. Priya Sall invites you to practice your professional skepticism skills, and Anthony Thompson gives a sneak peek into the proposed first IIA Topical Requirement on Cybersecurity.

Rachel Flenner and William Aurich from the ACUA Sidelines Committee break down key auditable areas in athletics, and I am sharing ways to add value by auditing your campus space utilization. Sponsor Baker Tilly highlights their video series on higher education internal audit challenges and explains how to navigate the updated NIST CSF 2.0 cybersecurity framework.

Don’t forget, the new IIA Global Internal Audit Standards take effect on January 9, 2025, and the AAP committee has prepared self-assessment guidance to help you get ready.

As we ease into winter and the middle of our fiscal years, it’s a great time to absorb all of the changes, see our profession in a new light, and pour yourself a hot, pumpkin-spiced beverage while you take it all in.

Sincerely,

Kara Hefner, Editor

Letter from the Editor

Hello ACUA Members!
It’s April and spring is here! The flowers are blooming, the Carolina pine pollen is dropping, and we are enjoying the mild weather outdoors before the cicadas hatch en masse. April is also national volunteer month. It’s a great reminder to give back to your communities, whether on a professional or personal level. Volunteering has been on the decline, especially since the pandemic. The top reasons people are not volunteering is because they feel they do not have the time or cannot find meaningful assignments, but those fears can be eased by finding the right opportunities.

Our ACUA community has many volunteer committee openings right now, from historian to nominating committee, DEI leadership to standards and best practices. I’ve read that the number one reason people volunteer is because they’re asked, so let this be your invitation to try an ACUA committee. Complete the call for volunteers form in our new Committee Updates feature.

This is a great time to recognize the contributions of volunteers, like our fantastic C&U Journal team. I would like to thank Olga Polikarpova (University of Alaska) for serving as Deputy Editor before her departure from higher education. Former copy editor Tyler Morgan (Mississippi State University) volunteered to move into the Deputy Editor role and even penned his first article on improving workpaper documentation. I also wish to thank our copy editors for proofreading submitted articles, often on very short notice, sharing their writing talents: Susan Edinger (University of Toledo), Erica Smith and Amy Wilegus (both University of Tennessee), and newcomer Julee Otter (Oregon State University). If you would like to join our team, email editor@acua.org.

Every article this issue was written by an ACUA member volunteering their time to share their insight on emerging topics with their peers. Natalie Harrison (Rutgers) is a double volunteer this issue, contributing two must-read articles on DEI and tips for new internal auditors. From Qatar University, Saumy Thomas shares critical emerging risks in higher education and Carl Canlas (Church of Jesus Christ of Latter-day Saints) defines the agile auditing process. Beth Harry (Johns Hopkins) provides an in-depth look at research security best practices.

Volunteering is a great way to develop valuable skills, boost our well-being, and make a tangible impact in our community. Maybe we need to dig a bit deeper to find the right opportunities, like those cicadas did 13 and 17 years ago.

Sincerely,
Kara Hefner, Editor

Letter from the President

Happy Spring, ACUA! I hope that everyone is packing away their cold-weather gear (depending on where you are in the country) and getting ready for flowers and sunshine. Personally, I love Spring. To me it represents new beginnings and fresh opportunities. So, in the spirit of Spring, if you have always wondered about volunteering but haven’t been sure where to begin, now is the time! A few weeks ago, ACUA sent out a “Call for Volunteers,” which listed over a dozen current volunteer opportunities. Take time to complete the survey here and a volunteer leader will be in touch with you!

On June 4th we will hold our annual business meeting. This will be held virtually and is open to all active ACUA members. Various leaders from across the organization will provide valuable updates on items such as:

  • State of ACUA
  • Financial Updates
  • Conference Trends

There will also be some exciting announcements, so be sure to attend if you are able! The presentation will be posted on ConnectACUA in the weeks following the meeting, should you not be able to attend.

Lastly, I’d like to thank our Professional Education Committee (PEC) for their tireless efforts to provide exceptionally relevant content to our members. Their work behind the scenes continues all year long, and that includes working with our management company to not only plan upcoming conferences, but also be thinking about future conferences. That said, I am excited to share that at the recommendation of PEC, we have finalized negotiations to host AuditCon 2025 in Louisville, Kentucky! Whether you prefer baseball bats or Derby hats, mark your calendar for September 14-19, 2025, for an in-person conference that is not to be missed. 

I hope everyone has a fantastic summer. I’ll look forward to seeing many of you in Atlanta, Georgia for AuditCon 2024 in September!

Marion Candrea, Boston University
ACUA President

ACUA Committee Updates

Join ACUA in making a positive impact! We are looking for dedicated individuals to volunteer and contribute their skills to the organization. Whether you have experience in community outreach, research and analytics, or digital marketing, your passion and commitment is needed. If you’re interested in becoming an ACUA volunteer, please review the current volunteer openings and complete the ACUA Call for Volunteers survey.

Communications Committee

  • The Connect ACUA forum has many communities that focus on small shops, data analytics, AutoAudit users, Workday ERP, athletics, and more. Click on the “communities” tab and join a group for tailored questions and answers.

Diversity and Inclusive Leadership Committee

  • The committee recently sent a survey to ACUA members regarding DEI and kindly request that you complete the survey.

Membership/Mentorship Program

  • The ACUA mentorship program is seeking new mentors and mentees to share university auditing career guidance and support. This program is open to all members of any size audit shop. To inquire about the program or get matched with a mentor/mentee please contact program director Earl Jackson at earl.jackson@unc.edu

Professional Education Committee

  • The 2024 ACUA AuditCon Conference will be held in-person September 15-19, 2024, at the Westin Peachtree in Atlanta, GA.
  • The 2025 ACUA AuditCon will be in Louisville, KY on September 14-19, 2025

Standards & Best Practice Committee

Auditing & Accounting Principles Subcommittee

  • The IIA released the new Global Internal Audit Standards on January 9, 2024. While they do not take into effect until January 9, 2025, the IIA is encouraging early adoption.
  • The first IIA Topical Requirement on Cybersecurity has been released in draft format and is open to public comments until July 3, 2024. Read the draft and provide your comments.

Kick Starter Subcommittee

  • Three new kick starters have recently dropped:
    • Travel Expense Review by Toni Stephens, The University of Texas at Dallas, in December 2023
    • Banner User Access by Annette Alboreo, Kent State University, in January 2024
    • Student Free Speech and Expression Events by John Winn, University of South Carolina, in March 2024

Virtual Learning Subcommittee

  • Upcoming webinars:
    • Fort Hill will discuss Subcontractor Bidding Process: Contract Controls and Auditing on June 20, 2024.

How Did ACUA Begin?

The Association of College and University Auditor’s currently serves over 500 institutions of higher education in the United States, Canada, and abroad. Our members include schools of all sizes: from community colleges to large university systems, both public and private. Membership has grown tremendously over the past 76 years, when thirteen charter universities decided to share their professional knowledge with each other. ACUA Historian Toni Stephens explains how it all began:

On February 24, 1958, Fred Vorsanger from Purdue and Stanley Smith from the University of Illinois circulated the idea of forming a group to meet and discuss mutual audit issues to the other Big Ten schools of the time. The idea quickly spread, and the inaugural meeting of ACUA was held at the LaSalle Hotel in Chicago on Monday April 7, 1958. Lasting from 9:00am until 3:00pm, the meeting focused on reviews of internal audit reports in different areas of operation. Smith would become the first ACUA President.
Eleven people from the following eight Big Ten schools attended.

  • University of Illinois
  • University of Indiana
  • University of Michigan
  • Michigan State University
  • University of Minnesota
  • Northwestern University
  • Ohio State University
  • Purdue University

Though they did not attend the first meeting, the following schools became part of the thirteen charter members of ACUA:

  • University of Chicago
  • Iowa State University of Science and Technology
  • University of Notre Dame
  • Southern Illinois University
  • University of Wisconsin

Shortly after the initial meetings, ACUA reached out to additional universities to join the group. In the last issue of the C&U Journal, the historian was looking for the oldest university membership certificate. No certificates from the original thirteen charter universities have been identified. The University of Mississippi still lays claim to displaying the oldest membership certificate from when they joined on September 10, 1959, just one year after the ACUA’s formation. Congratulations Ole Miss!

Earliest ACUA member certificate on record.

Tips for New Internal Auditors

Starting a new job can be both exhilarating and daunting at first, and starting a new job as an internal auditor is no different. Internal audit is a unique and continuously evolving profession where internal auditors play a critical role in an organization’s operations and corporate governance. Internal auditors use their experience and knowledge of laws, regulations, and organizational policies to examine and analyze an organization’s financials and identify potential occurrences of noncompliance, fund misappropriation, and other risks to the organization. Becoming an internal auditor is rewarding and has a great opportunity for professional development and advancement. Here is what new internal auditors should do to be successful in their career.

Seek a mentor

All internal auditors, whether this is your first year as an internal auditor or you have over 25 years of auditing experience, can benefit from having a mentor. Mentors help internal auditors understand their profession and career opportunities. It is important to find a suitable mentor who has more industry experience, shares similar values or goals, and is someone you admire. The right mentor should be your biggest ally and have a passion for teaching while allowing you to be your own advocate.

Learn and understand the basics of internal auditing and how to conduct an audit

To begin in this field, you must learn the standards that govern the process. The IIA Standards on performance explain the processes for planning, performing, reporting, and following up on audit engagements. The sooner you become familiar with these concepts, the faster you will be able to understand and apply this knowledge for developing and performing internal audits.

Relax and stay calm

When starting a new job, internal auditors tend to put an immense amount of pressure on themselves to be perfect. Internal audit is known for having a steep learning curve, so new auditors should take a deep breath, relax, and know that you are not alone. There will be other auditors, managers, and directors to help you learn your department’s procedures and answer any questions you may have.

Know your limits and when to ask for help

One of the hardest things for new internal auditors to learn is when to speak up and ask for help. Auditing is very technical, and it is highly unlikely that a new internal auditor will be a compliance, accounting, or fraud expert overnight. Do not spend hours trying to figure things out on your own. Rather, seek guidance from a more experienced colleague who can help you. Knowing your limits and knowing when to ask for help can save you time and reduce frustration and misunderstandings.

Be eager to learn and develop new skills

As an internal auditor, you analyze a variety of processes and interact with all levels of employees and subject matter experts. Do not be afraid to ask questions that will help you understand what you are auditing. As time goes on and you gain more experience, you will learn that internal audit is about striking a balance between understanding the big picture and focusing on the small details. Having a good knowledge of your organization’s policies, procedures, and risks will make you a standout internal auditor.

Sharpen your communication skills

Although communication skills are essential in any job, internal audit requires developing two key skill sets: effective writing and effective interviewing. An internal auditor’s writing should be objective and clear, making compelling arguments that present your audit results effectively. For successful interviews, internal auditors must be prepared, ask the right questions, listen, take good notes, and confirm their understanding of the processes and controls being audited. It is also extremely important that the interview is not one-sided but flows naturally from both sides.

Be a sponge by listening and absorbing all the information

As an internal auditor, you will have the opportunity to interact with, and learn from, all levels of employees, including interns, associates, managers, VPs, and directors. You can learn something from everyone you encounter, so be open-minded and receptive. Take note of the valuable skills others possess, such as communication, organization, leadership, and networking skills and learn from them.

Volunteer and get involved in areas outside of your comfort zone

New internal auditors are usually assigned to a variety of different audit engagements before they begin to specialize in certain areas or become subject matter experts. Learn as much as possible from your different engagements, and volunteer to be put on engagements that are not so glamorous, ones you know nothing about, or topics you want to learn more about. By exploring different assignments, you may find a preference for a particular area and may have the opportunity to work with a subject matter expert. If you volunteer to get involved in areas you are unfamiliar with, management and others will take notice of the effort. Your passion may be hidden somewhere you would have not explored if you did not push yourself.

Join a professional network or organization

Consider joining networks or organizations that support and cater to your interests, professional growth, and development. These groups usually offer members training opportunities to help you enhance your skills and stay current on auditing news and publications. Becoming a member of network groups or organizations can also help you grow your professional network and learn about other career opportunities.

Enjoy the experience

You are only a new internal auditor for a brief time. The beginning of your internal audit experience should be embraced because there is no other time in your auditing career when so much knowledge is obtained in such a short period. In addition to the new experiences and learning curve, new auditors are exposed to a vast array of unique individuals with wonderful backgrounds and experiences. Embrace the relationships you develop and the things you learn along the way. But most importantly, enjoy the journey!