6500-Policies
Information
Security -- Audit Division
The
following security policy guidelines' information should be considered current
auditing division policy and compliance is expected.
·
Restricted information:
All information reviewed in the course of an audit and information that
auditors have access to should be considered confidential.
·
Workpapers: Upon
completion of the audit, workpapers should be maintained in locked file
cabinets within the auditing division. Access to audit files will be granted to
individuals representing outside audit interests by the Campus Director of
Internal Audit. However, files should not leave the auditing division.
·
Data Ownership: All
data kept on the Office of Internal Audit's computers should pertain to the
University and related professional duties of the auditor. As such, these files
are considered the property of the Office of Internal Audit, rather than the
property of the individual who has created them. All files, whether paper,
electronic, fiche, etc., may need to be accessed from time to time. It is the
policy of the Office that such information will be freely accessible to those
who need it.
These
standards are designed to allow efficient access to information by those who
have a reason to use it, yet protect the integrity of the original files.
No
Smoking Policy
The Office
of Internal Audit has adopted a no-smoking policy.
Return to Table of Contents
Return to Office
of Internal Audit Main Page