|October||ICO & ICC plan current year assessment activity.|
|November||Disseminate Internal Control brochure to all employees// VA training.|
|December||IC Committee meets to identify areas to assess internally and areas to audit externally. |
External auditors selected & engaged.
|December||Send out VA’s to selected areas.|
|January||VA due back to ICO. External audit fieldwork performed.|
|January||ICO & ICC review and evaluate VA assessment results|
Risk Assessment survey begins with Operations. Team discusses results in the following month.
|February||External and Internal IC audits due.|
ICO & ICC review, evaluate & make recommendations to IC Committee. An action plan, if necessary is prepared and implemented. Risk Assessment continues with Legal Liability and Financial Controls.
|March||SUNY IC Annual Certification Report & SUNY IC Status Report due|
Risk Assessment concludes with Health & Safety.
|May||External audit fieldwork for the Alumni Association, Foundation and College|
|August||External audit completion for Alumni Association, Foundation and College|
IC = Internal Control
ICO = Internal Control Officer
ICC = Internal Control Coordinator
VA = Vulnerability Assessment