Continuous Auditing Course Fee Management

Project Report# 15-09 August 28, 2015

Office of Auditing and Consulting Services

"Committed to Service, Independence and Quality" THE UNIVERSITY OF TEXAS AT EL PASO

Office of Auditing and Consulting Services

August 28, 2015

Dr. Diana Natalicio President, The University of Texas at El Paso Administration Building, Suite 500 EIPaso,Texas79968

Dear Dr. Natalicio:

The Office of Auditing and Consulting Services has completed a continuous auditing project for course fees management. The objective of this was to identify high risk areas that require frequent review and to create a set of continuous auditing reports that provide timely alerts for transactions that may not be compliant with federal,state, and institutional laws and regulations.

We appreciate the cooperation and assistance provided by the Office of the Provost, the Director of Student Business Services and the Vice President for Student Affairs management team during our project.

Sincerely, �� }J;J>._-fj, Lori Wertz, CPA Interim Director

Administration Bldg. Fourth Floor El Paso, Texas 79968-0586 (915) 747-5191 Fax (915) 747-8913 The University of Texas at El Paso Office of Auditing and Consulting Services Continuous Auditing Project # 15-09

Report Distribution:

University of Texas at El Paso Dr. Gary Edens, Vice President forStudent Affairs Dr. Howard Daudistel, Interim Provost Mr. Richard Adauto, Executive Vice-President Ms. Elizabeth Flores, Associate Provost Ms. Sandra Vasquez, Assistant Vice-President for Institutional Compliance and EEO

University of Texas System Dr. Stephen Leslie, Executive Vice Chancellor for Academic Affairs Mr. Alan Marks, Attorney, Office of Academic Affairs Mr. Mark Salamasick, Executive Director, Audit Academic Mr. J. Michael Peppers, Chief Audit Executive

External Governor's Office of Mr. Ed Osner, Legislative Budget Board Coordinator, State Auditor's Office Sunset Advisory Commission

External Audit Committee Members Mr. David Lindau Mr. Steele Jones

Auditors Assigned to the Audit: Ms. Courtney Rios, Engagement Manager Ms. Victoria Morrison, IT Auditor Ms. Narahay Buendia, Lead Auditor The University of Texas at El Paso Office of Auditing and Consulting Services Continuous Auditing Project # 15-09

TABLE OF CONTENTS

EXECUTIVE SUMMARY ...... 2

BACKGROUND ...... 3

PROJECT OBJECTIVES ...... 4

SCOPE AND METHODOLOGY ...... 4

AUDIT RESULTS ...... 5

SUMMARY ...... 8

APPENDIX A: Unexpended Balance Report ...... 9

APPENDIX B: Questionable Report ...... 10

APPENDIX C: Reasonableness Report* ...... 11

APPENDIX D: New and increased fees...... 12

APPENDIX E: Three Lines Of Defense...... 13 The University of Texas at El Paso Office of Auditing and Consulting Services Continuous Auditing Project # 15-09

EXECUTIVE SUMMARY

The Office of Auditing and Consulting Services has completed a continuous auditing project.

During the project we noted the following:

• Course fees management is a high risk area that benefits from continuous auditing because fee approvals, assessments, and expenditures are separate functions handled by three differentdepartments and the informationis not available in a single report.

• The Provost, the Vice-President forStudent Affairs,the Director of Student Business Services, and other stakeholders lack the ability to monitor fees effectively due to the absence of reports that include information from other departments that is necessary for informed decision making. Four continuous auditing reports were created by the Office of Auditing and Consulting Services and may be used by management to monitor course fees more effectively. The reports allow staffto monitor the following areas:

Unexpended balances Report Objective: Monitor unexpended fee balances at the end of every fiscal year to determine if fee balances reflect the cost recovery nature of the course fee

Questionable expenditures Report Objective: Confirm that fee expenditures are spent in accordance with Texas Education Code 54 and Board of Regents' Rule 40401

Revenue Reasonableness Report Report Objective: Identify potential errors with feeassessment

New and Increased Fees Report Objective: Verify that new and approved fees have been appropriately approved and assessed in a timely manner

2 The University of Texas at El Paso Office of Auditing and Consulting Services Continuous Auditing Project # 15-09

BACKGROUND

The Institute oflnternal Auditors' Global Technology Audit Guide 3 (IIA GTAG 3) Continuous Auditing: Implications for Assurance, Monitoring, and Risk Assessment, provides the following guidance for the development of a continuous auditing program:

"Continuous auditing comprises ongoing risk and control assessments, enabled by technology and facilitated by a new audit paradigm that is shifting from periodic evaluations of risks and controls based on a sample of transactions, to ongoing evaluations based on a larger proportion of transactions.

Coordinating continuous auditing, continuous monitoring, and audit testing of continuous monitoring helps internal audit and management maximize their respective returns on investment and achieve compliance objectives, and it provides the opportunity to enhance the organization's overall health and competitiveness. "

GTAG 3 defines continuous assurance roles in the context of the IIA's "Three Lines of Defense" risk management and control framework:

• First Line of Defense: Operating management functions that own and manage risks

• Second Line of Defense: Functions that oversee risks, such as compliance

• Third Line of Defense: An internal audit function that provides independent assurance

For additional detail regarding the Three Lines of Defense, see Appendix E.

Based on previous audit reports and feedback from stakeholders, auditors selected course fees management as the first high risk area to address with continuous auditing reports. The decision to select course fees forthe pilot project was based on the following considerations:

• Course fee approval, assessment, and expenditures are handled by three separate departments.

• Many departmental documents are not available online, making it difficult for stakeholders to capture the information necessary for timely decision making.

• Previous audit reports from the Texas State Auditor's Office and the University of Texas at El Paso (UTEP) include findings involving course fee management.

The first UTEP continuous auditing reports were created in 2014 using data from DEFINE Business Information System and Banner Student Information System (Banner).

3 The University of Texas at El Paso Office of Auditing and Consulting Services Continuous Auditing Project # 15-09

PROJECT OBJECTIVES

The objectives of this project were to: A. develop PeopleSoft queries and Banner reports that continuously identify course fee transactions and data entries that may require further review, and B. ensure continuous auditing reports can be used by management as tools to increase awareness and compliance throughout the institution.

SCOPE AND METHODOLOGY

Auditors reviewed the methodology outlined in IIA GTAG 3 Continuous Auditing and IIA literature to identify high risk audit areas that would benefit from reports created automatically on a more frequentbasis. The key procedural steps to implement continuous auditing include:

1. Establish a continuous auditing strategy

2. Identify continuous auditing and roles

3. Determine the frequency and distribution of the reports

4. Configure continuous audit parameters

5. Prepare and validate the data

6. Report and manage results

The scope includes University course fee transactions from September 1, 201 3 through February 28, 201 5.

The project was conducted in accordance with the International Standards for the Professional Practice of Internal Auditing issued by the Institute of Internal Auditors.

4 The University of Texas at El Paso Office of Auditing and Consulting Services Continuous Auditing Project # 15-09

AUDIT RESULTS

1. Establish a continuous auditing strategy Auditors met with management in the following departments to discuss the content and format of the firstcontinuous auditing reports:

• Office of the Provost

• Office of Compliance

• Vice-President for Student Affairs

• Vice-President forBusiness Affairs

• Director of Student Business Services

Based on previous audit reports and the feedback fromstakeholders, auditors selected course fees management as the first high risk area to address with continuous auditing reports.

2. Identify monitoring and continuous audit roles Auditors developed the reports for continuous auditing in partnership with the Information Resources and Planning (IRP) Enterprise Computing Department. The reports can provide auditors and management with the ability to drill down into University-wide detailed transactions as a means to assess information electronically and to develop a systematic process to identify exceptions timely.

Continuous auditing reports are created and managed by the Office of Auditing and Consulting Services. Management may view and use the reports as needed for monitoring purposes. The reports will enable management to respond properly to identified risks and control deficiencies.

Continuous monitoring is a process owned by management. Management is responsible for maintaining effective control systems. They also have the most to benefit from obtaining timely insight into transactions that could be the result of fraud, error or abuse.

5 The University of Texas at El Paso Office of Auditing and Consulting Services Continuous Auditing Project # 15-09

3. Determine the frequency and distribution of the reports OACS created four reports to assist in the continuous auditing of course fee accounts. The objective of each report, system source,run date and the frequency of distribution is outlined in the chart below:

' 1 Name of Course Fee Report Appendix Source Frequency Issue Date Unexpended Balance Report Objective: Monitor unexpended fee balances at the end of every fiscal year to A PeopleSoft Annually October 15 determine if fee balances reflect the cost recovery nature of the course fee.

Questionable Expenditures Report Objective: Confirm that fee Fall and expenditures are spent in December 31 8 PeopleSoft Spring accordance with TEC 54 and May 31 Semesters Board of Regents' Rule 40401

Revenue Reasonableness Report Fall and One week Objective: Identify potential c Banner Spring after Census errors with fee assessment Semesters Day

Fee Approval and Assessment Comparison of Objective: Verify that new Official and approved fees have been Incidental Fee appropriately approved and Approval, fee D Annually July 30 assessed rates in Banner and fee amounts on the SSS website

NOTE: See Appendix A, B, C,and D for additional report detail.

6 The University of Texas at El Paso Office of Auditing and Consulting Services Continuous Auditing Project # 15-09

4. Configure continuous audit parameters Detailed documentation of the continuous auditing process and report parameters was created to ensure continuity of the process.

5. Prepare and validate the data Initial reports and queries were created, validated, and sent to management for feedback. Continuous auditing reports will be reviewed on an annual basis and updated as needed.

6. Report and manage results The continuous auditing reports were presented to the Associate Provost and College Administrative Officersat the Student Business Services Annual Fee Review Meeting held in July 201 5. The first reports will be run in August 201 5 when Fall 201 5 fees have been updated in Banner Student Information System. After receiving feedback from all stakeholders, OACS will expand the continuous auditing reports to include major fees and incidental fees.

Management Comments, Frank Grijalva, Division Administrative Officer, Vice President for Student Affairs:

We concur that management should be responsible for maintaining effective controls systems and it should also be responsible in monitoring the effectiveness of these controls as the university benefits from obtaining timely insight into transactions that are the result of fraud,error or abuse.

7 The University of Texas at El Paso Office of Auditing and Consulting Services Continuous Auditing Project # 15-09

SUMMARY

Continuous auditing adds value to the University by allowing auditors and management to become more proactive in the auditing and monitoring of operations. This pilot project demonstrates the need to expand continuous auditing in other high risk areas.

We wish to thank the management and staff of the Provost's Office, the Vice President for Student Affairs,the Director of Student Business Services, and IRP for their assistance and cooperation provided throughout the project.

8 The University of Texas at El Paso Office of Auditing and Consulting Services Continuous Auditing Project # 15-09

APPENDIX A: Unexpended Balance Report

SOURCE: PeopleSoft Query: UTE_IA_UNEXPENDED_BAL

UNEXPENDED BALANCE REPORT Cost Revenue Revenue Actual Unexpended �ear Unit Centr Cost Center Descr Dept Dept Descr Budget Recognized Budget Expenses balance Enc

2014 UTEP1 1 9253000 ART COU RSE FEES 740300 Art Department $50 ,000.00 $ 47, 828 . 30 $ 36,229.60 $ 32,838.33 $ 1 4,989.97 $ (1 , 165 . 50)

FIELD DESCRIPTIONS

• Year - Fiscal Year

• Unit - Business Unit (Always UTEPl for UTEP)

• Cost Center - Previously known as account in DEFINE

• Department - Department code corresponding to the Cost Center

• Department Description - Name to the corresponding department code

• Revenue Budget -Revenue budgeted for the Cost Center

• Revenue Recognized - Actual revenue collected by the Cost Center

• Expenses Budget - Expenses budgeted for the Cost Center

• Actual Expenses - Actual expenses incurred

• Unexpended Balance -Revenue Recognized minus (-) Actual Expenses

• Encumbrances - Encumbrances (currently not included in unexpended balance formula)

9 The University of Texas at El Paso Office of Auditing and Consulting Services Continuous Auditing Project # 15-09

APPENDIX B: Questionable Expenses Report

SOURCE: PeopleSoft Query: UTE_IA_QUESTIONABLE_EXP

QUESTIONABLE EXPENSES REPORT l eost Cost Center Department Sum Total � Centr Description Department Name t 2014 19253000 ART COURSE FEES 740300 Art Department xxxxxxx 50101 SW Faculty Sal & Wage $ 5,712.00 2014 19253000 ART COURSE FEES 740300 Art Department xxxxxxx 60305 Purchased Contract/Temp Srvcs Contracted $ 2 , 000.00 2014 1 9253000 ART COURSE FEES 740300 M Department xxxxxxx 63002 Postal Services Materials $ 133.07 2014 19253000 ART COURSE FEES 7 40300 M Department xxxxxxx 63103 Furnishings & Equip Expensed Materials $ 3, 144.98 2014 19253000 ART COURSE FEES 740300 M Department xxxxxxx 63810 Maint Repair Furniture Repairs $ 2 , 228 . 00

FIELD DESCRIPTIONS

• Year - Accounting Fiscal Year

• Cost Center- Previously known as account in DEFINE

• Cost Center Description - Cost Center title

• Department - Department code corresponding to the Cost Center

• Department Description- Name to the corresponding department code

• Manager- Cost Center Manager

• Account - Expense account, previously known as object code in DEFINE

• Account description - Expense account description

• Short Description- Short description of expense account

• Sum of expenses- Total expenses incurred by Cost Center for the corresponding expense account

10 The University of Texas at El Paso Office of Auditing and Consulting Services Continuous Auditing Project # 15-09

APPENDIX C: Revenue Reasonableness Report*

SOURCE: Banner

TERM COLL_DESC SUBJECT COURSE COURSE DETAIL FEE FEECOST CENTER FEETYF£ FEE CENSUS ACTUAL ESTIMA.TED NUMBER REFERENCE CODE DESCRJPTKlN AWOUNT ENROLLrvENT ENROLLMENT REVENUE NLMBER

'.01520 Collegeof Liberal Arts ART 1300 21577 FART Fine Arts Fee 19253000-40203 FLAT $ 5.00 99 89 $ 495.00 _...._

FIELD DESCRIPTIONS

• Term- Semester that the fee is assessed

• College- UTEP College where course is offered

• Subject - Course Subject

• Course Number- Identifier assigned to each course offering fora subject

• Course Reference Number- Identifies specific days and time of class section

• Detail Code - Banner code assigned to course fee

• Fee Description - Purpose of fee

• Fee Cost Center- Previously known as account in DEFINE

• Fee Type- Flat fee is assessed per course; SCH fee is assessed per semester credit hour

• Fee Amount - Dollar amount assessed to students in the course

• Census Enrollment- Student enrollment after Census Day, the last day to receive a refund for dropped classes

• Actual Enrollment- Student enrollment as of the date of Revenue Reasonableness Report

• Estimated Revenue - Census Enrollment * Fee Amount

*Additional fields appear in the actual report

11 The University of Texas at El Paso Office of Auditing and Consulting Services Continuous Auditing Project # 15-09

APPENDIX D: New and increased fe es

SOURCE: Banner, SBS website, and the approved Incidental Fees Committee memo

DETAIL COST TYPE OF ORIGINAL UT COURSE CODE CENTER CHANGE FEE NEW FEE UTEP System Goldmine SBS ANTH1301 DLUG 19410010 INCREASE $ 25.00 $ 50.00 YES YES YES YES ANTH1302 DLUG 19410010 INCREASE $ 25.00 $ 50.00 YES YES YES YES / ANTH1310 DLUG 19410010 INCREASE $ 25.00 $ 50.00 YES YES YES YES

FIELD DESCRIPTIONS

• Course -Course code

• Detail Code - Code assigned to course fee

• Cost Center- Previously known as account

• Type of Change- Increase or decrease in course fee

• Original Fee- Fee amount before change

• New Fee -Fee amount after change

• UTEP Approval- Was change in fee approved by University's President?

• UT System Approval- Was change in fee approved by Incidental Fees Advisory Committeee?

• Goldmine published- Was fee amount accurately published in Goldmine registration website?

• SBS published- Was fee accurately published in Student Business Services website?

12 The University of Texas at El Paso Office of Auditing and Consulting Services Continuous Auditing Project # 15-09

APPENDIX E: Three Lines Of Defense

Figu re 1: FoundationalConlinuous Assurance Framewor1<

Continuous Monitoring

The Institute of Internal Auditors Global Technology Audit Guide 3: Continuous Auditing: Coordinating Continuous Auditing and Monitoring to Provide Continuous Assurance, 2nd Edition

13