Download the Annual report 2011 - Unisa

UNISA ANNUAL REPORT 2011
REPORT ON INTERNAL
ADMINISTRATIVE CONTROLS
Unisa uses internal administrative controls to provide reasonable assurance that the following
activities are accomplished:
• the university’s objectives are achieved on an effective, efficient, economical, socially responsible
and ethical basis
• financial reporting is accurate, timely and in accordance with financial reporting standards;
• assets and information are safeguarded
• quality is improved
• legislation and regulations are complied with
• the ethical culture is infused into the operational activities of employees.
The existing internal administrative controls are directive, detective and corrective and include
policies, procedures and standard business forms; defined structures, roles, responsibilities and
segregation of duties; and delegation of authority and signing powers, accountability processes
and system controls.
All policies are compiled and/or revised through a due diligence process and approved at Council
level. The due diligence process gives some level of assurance pertaining to the probity and compliance
with institutional standards. Business forms have been incrementally standardised to assist
employees in their day-to-day activities, structures have been revised and approved, and roles
and responsibilities are defined as reflected in the structures. The segregation of duties is established
through the aforementioned structures and responsibilities. The delegation of authority
and signing powers is designed to mitigate the risk of unauthorised transactions and accountability
processes, as well as labour relations operations such as internal disciplinary and grievance
processes.
Systems are widely used in the university and system controls are in place to secure the systems
control over the input, processing and output of information. This receives attention
during the systems design phase, and improvements for input, processing and output controls
are continuously assessed through internal and external assurance reviews. Back-ups of data
are made and a disaster recovery plan is available for the university. Fortunately Unisa has
not had to put the efficacy of the plans and systems to the test. Information communication
and technology standards are in the process of being embedded into the systems and
ICT is aligned to the university’s objectives with an ever-increasing focus on service delivery,
support and control over processes and data.
The determination of strategic and operational objectives is based on an established
and proven planning methodology and is inclusive of risk management practices.
The planning process has commenced with a dedicated focus on identification of
the risks associated with the planned objectives as well as the appropriate mitigation
strategies to address the risks.
| 53 |