Chapter 3 – Policy Implications for Gaelic - University of Edinburgh

a Personal Tutor Scheme. The Committee was also interested in aspects of contingency
planning and other risk management issues and was supportive of a meeting between the
Audit Committee and the Risk Management Committee to enable further discussion.
The Audit Committee endorsed the revised University’s Risk Register.
8 EXTERNAL AUDIT PROVISION
It was noted that the current contract for the provision of external audit services would end
following completion of the 2012/2013 financial accounts. The Committee was content with
the proposed approach and timetable to identify external audit provision for the 2013/2014
financial accounts onwards and approved the proposal that at least two members of the
Audit Committee should be on the panel evaluating tenders received and that the panel
should be chaired by the Convener of the Audit Committee.
INTERNAL AUDIT
9 INTERNAL AUDIT PLANS 2012-2013 Appendix 1
The methodology adopted in preparing the Internal Audit Plan was noted and the
Committee welcomed the inclusion of audits on the emerging issues identified particularly
the student experience. There was discussion, and satisfactory information provided, on the
approach taken to ensure appropriate coverage of the financial systems and on the process
to identify specific Schools and departments to be included in the Plan in any particular
year. It was further confirmed that cognisance had been taken of the draft University
Strategic Plan, the final version of which was to be approved by Court on 2 July 2012.
The Audit Committee endorsed the Internal Audit Plan 2012/2013 and recommended
approval to Court.
10 INTERNAL AUDIT REPORTS
The Audit Committee considered the eight Internal Audit assignments completed since its
last meeting.
Password Policies
It was noted that the Head of ISG had agreed to provide an update to the next meeting of the
Audit Committee on the issues raised by this report. The Committee noted the work of the
IT Security Group and suggested that further consideration be given to the incident
recording process.
Data Protection Risk
It was noted that generally there was high awareness of the risks associated with ensuring
appropriate data protection and that policies and procedures were in place. The Committee
was satisfied with the action being taken in respect of the recommendation.
Edinburgh University Press
The issues around governance arrangements were noted and it was agreed to invite the
Director of Corporate Services to provide further information at the next meeting of the
Audit Committee particularly in respect of the adoption of the Anti-Bribery Policy.
The Convener of the Audit Committee confirmed her satisfaction with the approach being
adopted in respect of the outcome of the report of the special investigation and the
Committee noted the remaining Internal Audit assignments without comment.
3