§ 63I-5-301 — Audit committee -- Powers and duties.

(1) (1)(a) Each appointing authority may establish an audit committee to monitor the activities of the agency internal audit program.
(1)(b) An audit committee may serve more than one state agency internal audit program.
(2) The appointing authority shall ensure that audit committee members have the expertise to provide effective oversight of and advice about internal audit activities and services.
(3) Except as provided in Subsection (4), if an audit committee has been established, the audit committee shall:

(3)(a) appoint, evaluate, and, if necessary, remove the agency internal audit director;
(3)(b) prepare and adopt formal policies that define:
(3)(b)(i) the purpose of the agency's internal audit program; and
(3)(b)(ii) the authority and responsibility of the agency's internal auditors;
(3)(c) ensure that policies adopted under Subsection (3)(b):
(3)(c)(i) do not place limitations on the scope of the internal audit program's work; and
(3)(c)(ii) clarify that an auditor does not have authority or responsibility for an activity that the auditor audits;
(3)(d) ensure that:
(3)(d)(i) the audit director employs a sufficient number of professional and support staff to implement an effective internal audit program;
(3)(d)(ii) compensation, training, job tenure, and advancement of internal auditing staff is based upon job performance;
(3)(d)(iii) the audit director and staff collectively possess the knowledge, skills, and experience essential to the practices of the profession and are proficient in applying internal auditing standards, procedures, and techniques;
(3)(d)(iv) the internal audit program has staff who are qualified in disciplines necessary to meet the audit responsibilities, including accounting, business management, public administration, human resource management, economics, finance, statistics, electronic data processing, or engineering;
(3)(d)(v) internal audit staff are free of operational and management responsibilities that would impair their ability to make independent audits of any aspects of the agency's operations;
(3)(d)(vi) the audit director and the internal audit staff have access to all personnel and records, data, and other agency information that the audit director or staff consider necessary to carry out their assigned duties; and
(3)(d)(vii) the audit director and internal audit staff have the necessary access to the agency head, agency management, and agency staff;
(3)(e) approve internal auditing policies proposed by the agency head or audit director;
(3)(f) review and approve the annual internal audit plan, modifications to the internal audit plan, risk assessment, and budget;
(3)(g) review internal and external audit reports, follow-up reports, and quality assurance reviews of the internal audit office; and
(3)(h) periodically meet with the agency internal audit director to discuss pertinent matters, including whether there are any restrictions on the scope of audits.
(4) In relation to an audit committee established by the State Board of Education, the State Board of Education shall:

(4)(a) designate, in writing, the responsibilities and powers described in Subsection (3) that are held by the State Board of Education and the responsibilities and powers described in Subsection (3) that are held by the audit committee; and
(4)(b) make rules, in accordance with Title 63G, Chapter 3, Utah Administrative Rulemaking Act, for selecting the entity to be audited, determining the scope of the audit, and determining the procedures to be used in conducting the audit, including due process procedures.

Legislative History

Amended by Chapter 397, 2022 General Session