State agencies must run an internal auditing program and follow specified audit standards, reporting, staffing, and certification rules.
(a)Requirements. —A State agency shall establish a program of internal auditing that: (1)Promotes an effective system of internal controls that safeguards public funds and assets and minimizes incidences of fraud, waste, and abuse. (2)Determines if programs and business operations are administered in compliance with federal and state laws, regulations, and other requirements. (3)Reviews the effectiveness and efficiency of agency and program operations and service delivery. (4)Periodically audits the agency’s major systems and controls, including: a.Accounting systems and controls. b.Administrative systems and controls. c.Information technology systems and controls. (a1)Key Performance Indicators and Criteria. —In addition to the requirements of subsection (a) of this section, each agency head shall be responsible for ensuring that agency’s internal audit unit meets the required key indicators and criteria established by the Council under G.S. 143-747(c)(3a). (b)Internal Audit Standards. —Internal audits shall comply with current Standards for the Professional Practice of Internal Auditing issued by the Institute for Internal Auditors or, if appropriate, Government Auditing Standards issued by the Comptroller General of the United States. Each agency head shall annually certify to the Council that the audit plan was developed and the audit reports were conducted and reported in accordance with required standards. (c)Appointment and Qualifications of Internal Auditors. —Any State employee who performs the internal audit function shall meet the minimum qualifications for internal auditors established by the Office of State Human Resources, in consultation with the Council of Internal Auditing. (d)Director of Internal Auditing. —The agency head shall appoint a Director of Internal Auditing who shall report to, as designated by the agency head, (i) the agency head, (ii) the chief deputy or chief of staff, or (iii) the agency governing board, or subcommittee thereof, if such a governing board exists. The Director of Internal Auditing shall be organizationally situated to avoid impairments to independence as defined in the auditing standards referenced in subsection (b) of this section. (e)Insufficient Personnel. —If a State agency has insufficient personnel to comply with this section, the Office of State Budget and Management shall provide technical assistance. (f)Reporting Fraudulent Activity. —If an internal audit conducted pursuant to this section results in a finding that a private person or entity has received public funds as a result of fraud, misrepresentation, or other deceptive acts or practices while doing business with the State agency, the internal auditor shall submit a detailed written report of the finding, and any additional necessary supporting documentation, to the State Purchasing Officer. A report submitted under this subsection may include a recommendation that the private person or entity be debarred from doing business with the State or a political subdivision thereof. History: History.2007-424, s. 1; 2013-382, s. 9.1(c); 2013-406, s. 1; 2015-241, s. 25.1(a); 2015-268, s. 7.4; 2021-180, s. 24.5(a).