Each year, Internal Audit management develops an Annual Audit Plan based upon:
- Risk analysis of organizational units and business functions of the Medical Center.
- Information gathered from meetings with Senior Leadership within the Institution.
- Audits on the Office of Inspector General (OIG) work plan.
- Audits other Academic Medical Centers are considering on their Internal Audit work plans.
- Healthcare industry areas of risk.
Broad audit coverage is targeted with higher risk quotients being reviewed on a more frequent basis.
Once developed, Internal Audit management reviews the plan with The Medical Center leadership teams and presents the final plan to the Audit and Compliance Committee of the VUMC Board of Directors for approval.