University governance Audit and Risk Committee

Terms of Reference

Purpose

  • The Audit and Risk Committee reports to the University Court and oversees the arrangements for risk management, internal controls, internal audit, appointment and reappointment of External Auditors, and oversight of the completion and submission of the University’s annual report and accounts to the Scottish Funding Council.
  • The committee is authorised by Court to obtain outside legal or other independent professional advice and to secure the attendance of non-members with relevant experience and expertise if it considers this necessary, normally in consultation with the Principal and/or convener of Court.
  • It is also authorised to investigate any activity within its terms of reference and to seek any information it requires from any employee, and all employees are directed to co-operate with any request made by the committee.
  • The Committee provides constructive challenge to management and assurance to Court that risks are being managed and identified adequately, efficiently and effectively.

Main duties

The specific duties of the Audit and Risk Committee shall be to:

Internal Controls

  • Keep under review the adequacy and effectiveness of the University’s corporate governance arrangements, and its financial and other internal controls systems,
  • Consider the effectiveness of the University’s policy on whistleblowing and its arrangements for the prevention, detection or investigation of questions of fraud or other financial irregularities and be notified of any actions taken in line with such arrangements
  • To monitor and be satisfied that suitable arrangements are in place to promote economy, efficiency and effectiveness (value for money) in the management of the University’s resources

Internal Audit

  • Consider and advise the Court on the criteria for the selection and appointment of the Head of the Internal Audit (HIA) Service or the appointment and terms of engagement of the internal audit service
  • Review and endorse the Internal Audit Service’s draft assurance strategy and annual plans; consider major findings of internal audit reviews and management’s response and be satisfied that appropriate action is taken
  • Monitor the implementation of agreed audit-based recommendations
  • Consider if the resources made available to the Internal Audit Service are sufficient to meet the University’s needs and make recommendations to the Court, if appropriate
  • Promote co-ordination between the internal and external auditors
  • Ensure that the HIA is able to approach the Committee and/or the Convener should they wish to bring anything to their attention.

External Audit

  • advise the Court on the appointment of the external auditors, the audit fee, and any questions of resignation or dismissal of the external auditors
  • discuss with the external auditors, before the annual audit begins, the nature and scope of the audit
  • review the annual report and accounts prior to submission to the Court, in the presence of the external auditors and alongside the auditors’ formal opinion, the Management Letter and the Statement of Corporate Governance and Internal Control, in accordance with the Scottish Funding Council’s accounts direction, financial memorandum and other relevant direction and guidance
  • discuss with the external auditors any issues and reservations arising from the annual audit, including a review of the management letter, incorporating management responses and any other matters the external auditors may wish to discuss (in the absence of management where necessary)
  • to review and approve policy on the engagement of the external auditors to supply non-audit services

Risk Management

  • to monitor and ensure the effectiveness of the University's approach to risk assessment and management through regular review of the Corporate Risk Register and reports from relevant University officers or committees
  • to review the prioritisation of risk management focus via the Corporate Risk Register, taking into account financial, reputational and commercial risks
  • to challenge risk appetite and ensure adequacy of mitigating actions and controls
  • to ensure a robust Business Continuity plan is in place ensuring defined responsibilities and that reviews are carried out as and when required
  • To consider what assurances are required particularly in relation to high risk areas.
  • to receive, as appropriate, reports on the implementation of major projects within the University covering progress, risks and mitigations
  • to receive reports, as appropriate, where there is a potential reputational, commercial and/or financial risk to the University

Reports

  • consider the impacts of reports or guidance issued by relevant external bodies relevant to the remit of the Audit and Risk Committee and actions considered.
  • Prepare and present to Court, and subsequently to the Scottish Funding Council, an annual report covering the University’s financial year and any significant events up to the date of preparation. The report should express opinions in relation to the committee’s review of the effectiveness of institutional arrangements for:
    • Risk management, control and governance (including the adequacy of the governance statement)
    • Economy, efficiency and effectiveness (value for money)

Other

  • consider such other topics as may be remitted by Court from time to time
  • review, on an annual basis and in consultation with Court, the Committee’s own performance against accepted good practice

Composition

  • The Committee shall consist of no fewer than three lay members of the Court, of whom one shall be Convener. At least one member shall have recent relevant experience in finance, accounting or auditing. The Committee may recommend to Court Governance Committee the co-option of up to three further individuals external to the University, who should not have significant interests in the University, and shall recommend to the Court Governance Committee the fixed term of office for any co-opted members. Neither the Convener of Court nor the Convenor of the Finance and Resources Committee should be a member of the committee, although the Convenor of Finance and Resources   will attend for the meeting at which the Annual Reports and Accounts are considered by ARC.
  • In the absence of the convener at any meeting of the Committee, the Committee shall appoint any of its members as Acting Convener for that meeting.
  • The Convener of ARC shall not concurrently be a member of the Remuneration Committee or Finance and Resources Committee but may attend where appropriate.  

The meeting shall normally be attended by the following staff members of the University.

  • The Principal
  • Chief Financial Officer
  • University Compliance Officer
  • Head of Internal Audit Services
  • Senior Internal Auditor
  • Head of Risk and Resilience

Any other attending officer required for that meeting.

Meetings

  • Meetings shall normally be held at least four times each financial year. The external auditors or head of Internal Audit Service may request a meeting if they consider it necessary.
  • The committee should meet with the external and internal auditors, without any officers present, at least once a year.
  • There shall be a quorum at any meeting of the Committee when not less than 3 members, at least 2 of whom are members of Court, are present. In the absence of a quorum no business shall be transacted other than the adjournment of the meeting.
  • The Convener will ensure relevant induction for new members takes place as well as ongoing development where appropriate.