University of Missouri Internal Audit 2011 Audit Plan

1. University of MissouriInternal Audit2011 Audit Plan This information has been prepared solely for the use and benefit of the University of Missouri and is not intended for reliance by any other person. OPEN – INFO – AUD 3

2. 2011 Internal Audit Plan Overview • 2011 Internal Audit Plan Update Process • Identify Common Audit Areas and Risks for Universities and Health Systems • Identify and Assess Risks of the University • Consider Audit History • Engage Leadership in Discussion Around Risks • Build and Validate Plan • Campus, UM System and Health System Analysis Leading to Proposed Audits • Summary 2011 Proposed Audit Plan December 9-10, 2010 OPEN – INFO – AUD 3a This information has been prepared solely for the use and benefit of the University of Missouri and is not intended for reliance by any other person.

3. 2011 Internal Audit PlanCommon Audit & Risk Areas Common Audit & Risk Areas Universities Health System (incremental to areas above) December 9-10, 2010 OPEN – INFO – AUD 3b This information has been prepared solely for the use and benefit of the University of Missouri and is not intended for reliance by any other person.

4. 2011 Internal Audit PlanCommon Audit & Risk Areas – Audit History Map • Key: • Done 2007-2010 • X Planned for 2011 • X System-wide • audit coverage • Notes: • Audit focus is on internal controls, transaction propriety, asset safeguarding, policies, laws and regulations • The coverage in the chart indicates audits were performed in the area and is not representative of the depth into each area December 9-10, 2010 OPEN – INFO – AUD 3c This information has been prepared solely for the use and benefit of the University of Missouri and is not intended for reliance by any other person.

5. 2011 Internal Audit Plan University of Missouri System • Proposed Audits • IT Spend Analysis - Analysis of IT spend across campuses, the new IT procurement policy and may include the Tiger Institute • System-Wide Conflict of Interest - Evaluate the University's policies, key controls and benchmark with other universities • System-Wide Procurement Card Review - Combine with Accounts Payable Data Analysis and perform procure to pay review • Accounts Payable Data Analysis - Combine with Procurement Card Review and perform procure to pay review • UM System-Wide Financial Aid Review - Review the structure, controls and allocation methodology for financial aid • Human Resources - Review of HR processes potentially focused on compensation strategies OPEN – INFO – AUD 3d This information has been prepared solely for the use and benefit of the University of Missouri and is not intended for reliance by any other person. December 9-10, 2010

6. 2011 Internal Audit Plan University of Missouri - Columbia • Proposed Audits • Data Center Review - Review of select IT controls within the UMC data centers • College of Education - Departmental review of processes and compliance areas • Missouri Health Information Technology Assistance Center - Review the sponsored project for compliance with federal • guidelines and analyze the feasibility of funding models for the required match • College of Agriculture, Food and Natural Resources (CAFNR) - Departmental review of processes and compliance areas OPEN – INFO – AUD 3e This information has been prepared solely for the use and benefit of the University of Missouri and is not intended for reliance by any other person. December 9-10, 2010

7. 2011 Internal Audit Plan University of Missouri – Kansas City • Proposed Audits • Campus Facilities Management - Evaluate the effectiveness of the planning and construction process • Student Affairs, Financial Aid, and Scholarship - Review of collection of student tuition and fees, with a focus on waivers • and financial aid OPEN – INFO – AUD 3f December 9-10, 2010 This information has been prepared solely for the use and benefit of the University of Missouri and is not intended for reliance by any other person.

8. 2011 Internal Audit Plan Missouri S&T • Proposed Audits • University Advancement - Departmental review of processes and compliance areas with a focus on the development • functions of the department • Department of Academic Affairs - Review the structure of the department and evaluate the effectiveness of the new • model on oversight and reporting at the campus December 9-10, 2010 OPEN – INFO – AUD 3g This information has been prepared solely for the use and benefit of the University of Missouri and is not intended for reliance by any other person.

9. 2011 Internal Audit Plan University of Missouri – St. Louis • Proposed Audits • KWMU - Departmental review of processes and compliance areas • Department of Athletics - Departmental review of processes and compliance areas December 9-10, 2010 OPEN – INFO – AUD 3h This information has been prepared solely for the use and benefit of the University of Missouri and is not intended for reliance by any other person.

10. 2011 Internal Audit Plan University of Missouri Health System • Proposed Audits • ICD-10 - Evaluate the ICD-10 preparedness including the project plans and impact assessment • Graduate Medical Education (GME) - Evaluate the structure, costs and governance over the GME program • Capital Project Management - Evaluate the governance and management of major capital projects • Inventory Optimization - Analyze whether inventory practices limit excess inventories December 9-10, 2010 OPEN – INFO – AUD 3i This information has been prepared solely for the use and benefit of the University of Missouri and is not intended for reliance by any other person.

11. 2011 Proposed Internal Audit Plan University of Missouri System Missouri S&T University of Missouri – St. Louis University of Missouri - Columbia University of Missouri Health System Internal Audit Administration University of Missouri – Kansas City OPEN – INFO – AUD 3j * Potential alternate audits should others be delayed or removed This information has been prepared solely for the use and benefit of the University of Missouri and is not intended for reliance by any other person. December 9-10, 2010