Title: OACR audit focus
Full Citation
Permanent Link: http://ufdc.ufl.edu/UF00087344/00007
 Material Information
Title: OACR audit focus
Series Title: OACR audit focus
Physical Description: Serial
Creator: Office of Audit & Compliance Review, University of Florida
Publisher: Office of Audit & Compliance Review
Publication Date: February 2004
 Record Information
Bibliographic ID: UF00087344
Volume ID: VID00007
Source Institution: University of Florida
Rights Management: All rights reserved by the source institution and holding location.


This item has the following downloads:

New0204 ( PDF )

Full Text

'R Audit Focus

A quarterly newsletter from the Office of
Audit & Compliance Review

Nur Erenguc, Chief Audit Executive
February, 2004

University's Enterprise Directory System

Inside this issue:

University's En- I
terprise Directory

Flair Transition
to Peoplesoft:Au- I
dit & Certiftcation

Travel Funded by
Support Organi- 2

Good Computer
Security Practices 2
for Users

We're on the Web

The University Enterprise Directory is a
centralized repository of directory and
other institutional information sup-
ported with computer and network sys-
tems. It is a mission critical system
that stores contact information and
identification numbers for University
faculty, staff, students, and other affili-
ates depending on its accuracy. With
the University identification number
(UFID) assigned automatically by the
Directory, departments rely on the Di-
rectory to establish and maintain af-

-----,.- filiation with
l the Univer-
---- sity for indi-
Sviduals. The
OACR audit
=.. conducted
this quarter
reflected the Directory to be secure and
reliable. Reported concerns, such as
duplicate records and invalid birthdates
and development standards for data
quality and validation will be ad-

Flair Transition to Peoplesoft: Audit &
Certi fi cation

.gH .As part of
the transi-
IbopleSoft8 tion from the
S Florida Ac-
counting In-
Resource Subsystem (FLAIR) to People-
Soft for financial accounting/reporting
and payroll processing on July 1, 2004,
OACR is providing limited scope audits
of the Finance, Human Resources and
Payroll modules. The audits empha-
size the evaluation of key controls in
the implemented business systems, in-

cluding adequate segregation of duties;
integrity reliability and adequacy of in-
formation including data required by
the Board of Education and the Legisla-
ture; and modular security. The audits
are scheduled to be completed before
implementation and will help ensure
that adequate controls exist and are
functioning adequately for the required
certifications before the transition date
of July 1, 2004.

PeopleSot 8.0 Software Inlegraion



Travel Funded by Support Organizations

OACR Address:

Office of Audit &
Compliance Review
341 Tigert Hall,
P.O. Box 113025,
FL 32611

Tel: (352) 392-1391
Fax: (352) 392-3149

Liana Hadjigeorgiou
William Moon
Suzanne Newman

We're on the Web

were authorized and adequately sup-
ported. Audit concerns to be addressed
included the implementation of institu-
tional travel policies and procedures,
the requirement that authorizations for
travel be in advance of travel and be
documented, including the funds to be
utilized; and the requirement that all
travel reimbursements be signed by the
traveler acknowledging that reimburse-
ment has not been requested from
other sources.

Good Computer Security Practices for Users

With the transition from FLAIR to Peo-
pleSoft, the University assumes even
greater responsibility for security of its
computer based financial and other
sensitive information. Basic control
elements critical to ensuring proper
computer access and accountability in-
clude the following Current Best Prac-
tices for computer passwords: Pass-
words should be at least 6 characters.
A good password is difficult to
guess. It contains alpha, numeric and
shift characters. It cannot be found in

the dictionary. Do not use
any part or any form of a
Sword that is easily identified
with you including your name, user id,
birthday, address, phone number, so-
cial security number, etc. Do not write
passwords down or store them online.
Change passwords often, at least every
3 months. Remember, you are respon-
sible for the protection of your pass-
word never provide it to anyone!
Careful use of your password protects
both you and the University's systems.

Office of Audit & Compliance Review
341 Tigert Hall
P.O. Box 113025
Gainesville, FL 32611

SUniversity travel may be
funded by state funds
and funds from affiliated
organizations. Rules that
govern travel funded by these affiliated
organizations vary. Advance travel au-
thorization, which documents the ap-
proval of work status outside of the
primary location and provides for the
commitment of funds, has not gener-
ally been required by affiliated organi-
zations. Travel expenditures reviewed

University of Florida Home Page
© 2004 - 2010 University of Florida George A. Smathers Libraries.
All rights reserved.

Acceptable Use, Copyright, and Disclaimer Statement
Last updated October 10, 2010 - - mvs