1. INTERNAL CONTROLS and UNC-CHAPEL HILL Stan Koziol, CPA

2. ADMINISTRATIVE OFFICE BUILDING (AOB)

3. INTERNAL CONTROLS BUNKER BELOW THE AOB

4. Internal Control is a Process, effected by an entity’s board of directors, management and other personnel, designed to provide reasonable assurance regarding the achievement of objectives in the following categories: Process, effected by an entity’s board of directors, management and other personnel, designed to provide reasonable assurance regarding the achievement of objectives in the following categories:

5. CATEGORIES Effectiveness and efficiency of operations Effectiveness and efficiency of operations Reliability of financial reporting Reliability of financial reporting Compliance with applicable laws and regulations Compliance with applicable laws and regulations

6. TOPICS Buzz Words & Phrases Buzz Words & Phrases Review Internal Control Initiatives Review Internal Control Initiatives

7. BUZZ WORDS & PHRASES SOX SOX Sarbanes-Oxley Act of 2002

8. SARBANES OXLEY ACT of 2002 Enacted on July 30, 2002 Enacted on July 30, 2002 In Response to Major Corporate and Accounting Scandals In Response to Major Corporate and Accounting Scandals Applies to Companies Registered with the SEC Applies to Companies Registered with the SEC Does Not Apply to Not-For-Profit Entities Does Not Apply to Not-For-Profit Entities

9. SARBANES OXLEY ACT of 2002

10. ENRON

11. WHO IS RESPOSIBLE ?

12. GET THE SHREDDER !

13. WHAT HAPPENED ?

14. BUZZ WORDS & PHRASES SOX SOX NACUBO Advisory Report 2003-3 NACUBO Advisory Report 2003-3

15. BUZZ WORDS & PHRASES SOX SOX NACUBO Advisory Report 2003-3 NACUBO Advisory Report 2003-3 Guidance and Best Practices Guidance and Best Practices

16. BUZZ WORDS & PHRASES SOX SOX NACUBO Advisory Report 2003-3 NACUBO Advisory Report 2003-3 Guidance and Best Practices Guidance and Best Practices Did You See Today’s Newspaper? Did You See Today’s Newspaper?

17. BUZZ WORDS & PHRASES SOX SOX NACUBO Advisory Report 2003-3 NACUBO Advisory Report 2003-3 Guidance and Best Practices Guidance and Best Practices Did You See Today’s Newspaper? Did You See Today’s Newspaper? Tone at the Top Tone at the Top

18. BUZZ WORDS & PHRASES SOX SOX NACUBO Advisory Report 2003-3 NACUBO Advisory Report 2003-3 Guidance and Best Practices Guidance and Best Practices Did You See Today’s Newspaper? Did You See Today’s Newspaper? Tone at the Top Tone at the Top Hotline / Whistle Blower Hotline / Whistle Blower

19. BUZZ WORDS & PHRASES SOX SOX NACUBO Advisory Report 2003-3 NACUBO Advisory Report 2003-3 Guidance and Best Practices Guidance and Best Practices Did You See Today’s Newspaper? Did You See Today’s Newspaper? Tone at the Top Tone at the Top Hotline Hotline Sub-Certification Sub-Certification

20. BUZZ WORDS & PHRASES SOX SOX NACUBO Advisory Report 2003-3 NACUBO Advisory Report 2003-3 Guidance and Best Practices Guidance and Best Practices Did You See Today’s Newspaper? Did You See Today’s Newspaper? Tone at the Top Tone at the Top Hotline Hotline Sub-Certification Sub-Certification Cascade Effect Cascade Effect

21. CASCADE EFFECT Risk that some states will pass their own version of Sarbanes-Oxley for smaller, privately held companies and not-for-profits. Risk that some states will pass their own version of Sarbanes-Oxley for smaller, privately held companies and not-for-profits. AICPA formed the Special Committee on State Regulation. AICPA formed the Special Committee on State Regulation.

22. UNC CHAPEL HILL INITIATIVES Establish the “Tone at the Top” Establish the “Tone at the Top”

23. UNC CHAPEL HILL INITIATIVES Establish the “Tone at the Top” Establish the “Tone at the Top” Dedicate a Full Time Position Dedicate a Full Time Position

24. UNC CHAPEL HILL INITIATIVES Establish the “Tone at the Top” Establish the “Tone at the Top” Dedicate a Full Time Position Dedicate a Full Time Position Implement “Best Practices” Implement “Best Practices”

25. UNC CHAPEL HILL INITIATIVES Establish the “Tone at the Top” Establish the “Tone at the Top” Dedicate a Full Time Position Dedicate a Full Time Position Implement “Best Practices” Implement “Best Practices” Ethics Ethics New Ethics StatementNew Ethics Statement Applying Ethics to Your JobApplying Ethics to Your Job Code of ConductCode of Conduct Ethics TrainingEthics Training

26. UNC CHAPEL HILL INITIATIVES Hotline & Financial Controls Website Hotline & Financial Controls Website

27. UNC CHAPEL HILL INITIATIVES Hotline & Financial Controls Website Hotline & Financial Controls Website University Enterprise Risk Management Advisory Committee University Enterprise Risk Management Advisory Committee

28. UNC CHAPEL HILL INITIATIVES Hotline & Internal Controls Website Hotline & Internal Controls Website University Enterprise Risk Management Advisory Committee University Enterprise Risk Management Advisory Committee Internal Control Self Assessment Internal Control Self Assessment

29. UNC CHAPEL HILL INITIATIVES Hotline & Internal Controls Website Hotline & Internal Controls Website University Enterprise Risk Management Advisory Committee University Enterprise Risk Management Advisory Committee Internal Control Self Assessment Internal Control Self Assessment Audit and Finance Committee Charter Audit and Finance Committee Charter

30. UNC CHAPEL HILL INITIATIVES Hotline & Internal Controls Website Hotline & Internal Controls Website University Enterprise Risk Management Advisory Committee University Enterprise Risk Management Advisory Committee Internal Control Self Assessment Internal Control Self Assessment Audit and Finance Committee Charter Audit and Finance Committee Charter Enhanced Data Analysis Enhanced Data Analysis

31. UNC CHAPEL HILL INITIATIVES Hotline & Internal Controls Website Hotline & Internal Controls Website University Enterprise Risk Management Advisory Committee University Enterprise Risk Management Advisory Committee Internal Control Self Assessment Internal Control Self Assessment Audit and Finance Committee Charter Audit and Finance Committee Charter Enhanced Data Analysis Enhanced Data Analysis Sub-Certification Sub-Certification

32. IN CONCLUSION Integrity & Public Trust Integrity & Public Trust Positioned to be #1 Positioned to be #1 Funding Funding Attractive Bond Ratings Attractive Bond Ratings Excellence in Financial Reporting Award from GFOA Excellence in Financial Reporting Award from GFOA

33. SELF ASSESSMENTS Thank you for all the suggestions! Thank you for all the suggestions!

34. SELF ASSESSMENTS Thank you for all the suggestions! Thank you for all the suggestions! Written disaster plan Written disaster plan

35. SELF ASSESSMENTS Thank you for all the suggestions! Thank you for all the suggestions! Written disaster plan Written disaster plan Segregation of duties Segregation of duties

36. SELF ASSESSMENTS Thank you for all the suggestions! Thank you for all the suggestions! Written disaster plan Written disaster plan Segregation of duties Segregation of duties Equipment inventory list Equipment inventory list

37. Internal Control is a Process, effected by an entity’s board of directors, management and other personnel, designed to provide reasonable assurance regarding the achievement of objectives in the following categories: Process, effected by an entity’s board of directors, management and other personnel, designed to provide reasonable assurance regarding the achievement of objectives in the following categories:

38. THANK YOU !