Issued April 2007
Table Of Contents
I.
II.
III.
IV.
V.
VI.
VII.
1.0
2.0
3.0
4.0
5.0
Preface
Objective
Scope
Process
Responsibility
Fraud
Revisions
Introduction
General Control Requirements
Quick Reference
Revenue Cycle
2.1 Order Entry/Edit
2.2 Loan/Financial Aid
2.3 Billing
2.4 Accounts Receivable
2.5 Collection
2.6 Cash Receipts
Procurement Cycle
3.1 Supplier Selection and Retention
3.2 Purchasing
3.3 Receiving
3.4 Accounts Payable
3.5 Disbursements
Payroll Cycle
4.1 Human Resources, Compensation, and Benefits
4.2 Payroll Preparation and Security
4.3 Payroll Disbursement Controls
4.4 Distribution of Payroll
Financial Reporting Cycle
5.1 Accumulation of Financial Information
5.2 Processing and Reporting of Financial Information
5.3 Related Party Accounts
6.0 Computer Systems Controls
6.1 System Owners and Custodians of Equipment
6.2 Physical Security and Environmental Controls
6.3 Computer Access Security
6.4 Network Security
6.5 Systems Development Methodology
6.6 Configuration Management
6.7 Computer Operations and Back-up
6.8 Disaster Recovery Planning
6.9 Input Controls
6.10 Processing Controls
6.11 Output Controls
6.12 Paperless Transaction Processing
7.0 Environment, Health and Safety
8.0 Miscellaneous Cycles
8.1 Capital Assets
8.2 Subsequent Additions/Future Use
9.0 Loss Prevention Cycle
9.1 Physical Security
9.2 Access Controls
9.3 Personnel Security
9.4 Physical Asset Protection
9.5 Protection of Trademarks/Logos
10.0 Intellectual Property
Acknowledgement:
The model used within this document is based off that of Motorola, Inc and is being used with their permission.
I. PREFACE
Our university has long had a formal statement of policy regarding the maintenance of an adequate system of operating and financial controls. The Standards of Internal Control (SIC) were developed to serve as a resource to help document our continued commitment