• Section 1 - Overview
• Introduction
• Objectives
• Section 2 - Committee membership
• Membership
• In attendance
• Membership Requirements
• Chair
• Gender representative objective
• Election procedure for elected members
• Term of office
• Section 3 - Terms of reference
• Functions
• Section 4 - Delegations
• Delegation from Council
• Section 5 - Authority
• Section 6 - Roles and responsibilities
• Section 7 - Reporting
• Section 8 - Reporting lines
• Section 9 - Conduct of Committee business
• Reporting to Council
• Meetings
• Business papers
• Quorum
• Use of technology
• Resolutions
• Confirmation of minutes
• Self Review
• Secretary to Committee
• Standing Orders
• Dispute Resolution
• Conflicts of interest
• Induction
• Review of Charter
• Section 10 - Definitions and interpretation
• Definitions
• Interpretation

Section 1 - Overview

Introduction

(1) The Audit and Risk Committee Terms of Reference and Charter sets out the objectives, authority, composition and tenure, roles and responsibilities, reporting and administrative arrangements of the Audit and Risk Committee (the Committee) of the University of New England.

(2) The Committee is established as a Committee of the Council of the University of New England (the Council), with delegated authority for a number of Council functions associated with audit, risk management and compliance at the University and its related entities. The establishment of this Committee and the delegation of Council powers to it are actions authorised under Section 17 of the University of New England Act 1993 (UNE Act).

(3) The provisions of this document take effect as a Council Rule made under Section 29 of the UNE Act. The document is also the University's instrument for meeting its statutory obligations required by NSW Treasury and the Institute of Internal Auditors (Australia). For the purposes of its professional obligations, these Terms of Reference are also considered to be the University's Audit and Risk Committee Charter.

Objectives

(4) To consider, review and advise the Council of the University of New England (the Council) on the compliance of the University and its related entities with the various laws and regulations by overseeing and monitoring the University of New England’s governance, compliance, risk and control frameworks and its external accountability requirements. 

(5) To maintain organisational arrangements that provide additional assurance, independent from operational management, on internal audit and risk management.

Section 2 - Committee membership

Membership

(6) The members of the Committee are as follows:

1. Deputy Chancellor (ex-officio);
2. Chair of the Finance and Infrastructure Committee (ex-officio); and
3. Three (3) Lay members elected by and from the UNE Council; at least one of the Lay members will have relevant skills and experience in relation to the Committee's key objectives.

(7) Additional members may include:

1. Up to two (2) independent external members, with appropriate professional expertise and experience, appointed to the Committee by the UNE Council on the recommendation of the Committee. Independent external members are not eligible to be the Chair of the Audit and Risk Committee; and
2. Up to two (2) Lay Council members co-opted from the UNE Council to the Committee by the Chair to meet the Committee's cultural diversity and gender representation objectives.

In attendance

(8) Official attendees:

1. The Vice-Chancellor and Chief Executive Officer shall be entitled to attend and participate (but not vote) at each Committee meeting. The attendance of other Council members shall be at the discretion of the Chair and they shall have the status of an observer;
2. The attendance of other Council members shall be at the discretion of the Chair and they shall have the status of an observer;
3. University Secretary and/or nominee;
4. Relevant Senior Executive(s) and/or nominee (unless the Chair directs otherwise); and
5. Head, Internal Audit and Chief Risk Officer.

(9) Other:

1. Any other person invited by the Chair, including, for example, representatives from the University’s external auditor.

Membership Requirements

(10) The Council has had regard to NSW Treasury Policy (TPP20-08) Core Requirement Section 3 in setting the membership of the Audit and Risk Committee. Whilst not binding on the University, the Council has considered its principles as an example of better practice in the public sector.

(11) Consistent with good practice, the Chancellor will not be a voting member of the Audit and Risk Committee.

Chair

(12) The Committee will elect the Chair from its Lay members. The Chair will hold office for the remainder of their term on the Committee, or until removed by the Committee, whichever occurs first. If the Chair is unavailable to act as Chair for any period, then the Committee will elect a temporary Chair to act during that period.

Gender representative objective

(13) The objective will be to ensure, so far as is practicable, that the membership of the Committee includes the following gender representation:

1. where the Committee has five or more members, at least two of each gender; and
2. where the Committee has four or less members, at least one of each gender.

Election procedure for elected members

(14) Elected members of the Committee will be elected by Council at a Council meeting.

Term of office

(15) The ex-officio members (Deputy Chancellor and Chair of the Finance and Infrastructure Committee) will be Committee members whilst they hold their primary office.

(16) The Lay Council members will be Committee members for two years or such other time as determined by Council, or until they cease to be a Council member, whichever occurs first.

(17) The co-opted independent external members (if applicable) will be Committee members for two years or such other time as determined by Council, or until they resign or are removed by Council, whichever occurs first.

(18) The co-opted Council members (if applicable) will be Committee members for two years or such other time as determined by Council, or until they cease to be a Council member, whichever occurs first.

Section 3 - Terms of reference

Functions

(19) Approval functions:

1. approve rules and policies relating to the function of internal audit, risk management, compliance, business continuity, corruption and fraud within UNE, including the Internal Audit's Operational and Strategic Plans and the annual timetable of audits to be conducted; and
2. approve the Internal Audit Charter.

(20) Advisory and Monitoring Functions:

1. advise Council in relation to the matters referred to within the scope of this Committee's objectives; and
2. as detailed below in the Section, "Roles and responsibilities".

(21) Authority:

1. The Committee has no executive powers;
2. As detailed below in the Sections, "Roles and Responsibilities" and "Authority" the Committee is directly responsible and accountable to the Council for the exercise of its responsibilities. In carrying out its responsibilities, the Committee must:
   1. recognise that responsibility for management of the University of New England rests with the Vice-Chancellor and Chief Executive Officer;
   2. resolve any disagreements between management and the external auditor; and
   3. in consultation with, or as requested by Council, review, revise or expand the responsibilities of the Committee from time to time.

Section 4 - Delegations

Delegation from Council

(22) This committee has delegated authority from the UNE Council to perform on behalf of Council the approval, advice and monitoring functions set out in the terms of reference above.

Section 5 - Authority

(23) The Council authorises the Committee, within the scope of its role and responsibilities, to:

1. obtain any information it needs from any employee and/or external party (subject to their legal obligation to protect information);
2. discuss any matters with the external auditor, or other external parties (subject to confidentiality considerations);
3. request the attendance of any employee, as required, at Committee meetings;
4. obtain external legal or other professional advice, as considered necessary to meet its responsibilities, at the University of New England's expense.

Section 6 - Roles and responsibilities

(24) The Committee's responsibilities are to:

1. Assess internal audit activity
   1. act as a forum for communication between the Council, senior management and internal audit;
   2. review the annual Internal Audit Plan to ensure:
      1. the Plan is based on UNE's risk management framework; and
      2. the Plan provides optimal cost-effective internal audit coverage of operations and reporting arrangements for the University;
   3. oversee the coordination of audit programs conducted by internal and external audit and other review functions;
   4. review all audit reports and provide advice to the Council on significant issues identified in audit reports and action taken on issues raised, including identification and dissemination of good practice;
   5. monitor management's implementation of internal audit recommendations;
   6. review and assess the performance of the internal audit operations against the annual and strategic audit plans;
   7. review the Internal Audit Charter to ensure appropriate organisational structures, authority, access and reporting arrangements are in place;
   8. review the adequacy of the Internal Audit Charter, organisation, staffing, skills and training; and
   9. monitor developments within the audit field and the standards issued by professional bodies and other regulatory authorities, in order to encourage the use of best practice by the internal audit team;
2. Oversee risk management
   1. review the currency, comprehensiveness and relevance of the University's Risk Management Rule, including the identification and management of risks related to fraud and business continuity;
   2. endorse the University of New England's strategic risk register;
   3. review whether a sound and effective approach has been followed in developing strategic risk management plans for major projects or undertakings;
   4. review the impact of the University of New England's risk management process on its control environment and insurance arrangements;
   5. review whether a sound and effective approach has been followed in establishing the University of New England's business continuity planning arrangements, including whether disaster recovery plans have been tested periodically;
   6. review the University of New England's fraud control plan and satisfy itself that the University of New England has appropriate processes and systems in place to capture and effectively investigate fraud related information;
   7. ensure that risk identification and linked audit activities are addressed in the development and review of internal audit plans, and in discussions on external audit strategies; and
   8. monitor the implementation of risk management across the University.
3. Control framework
   1. review whether management's approach to maintaining an effective internal control framework, including over external parties such as contractors and advisors, is sound and effective;
   2. review whether management has in place relevant policies and procedures, and that these are periodically reviewed and updated, including:
      1. monitor the effectiveness of management's strategies for and risk management of information technology systems and service delivery;
      2. monitor the effectiveness of management's strategies for and risk management of the maintenance, repair and replacement of buildings and other physical assets; and
      3. monitor the effectiveness of management's strategies for and risk management of the provision of safety and security, utilities and other services on campus.
   3. determine whether the appropriate processes are in place to assess, at least once a year, whether policies and procedures are complied with;
   4. satisfy itself that appropriate policies and procedures are in place for the management and exercise of delegations;
   5. consider how management identifies any required changes to the design or implementation of internal controls; and
   6. review whether management has taken steps to embed a culture which is committed to ethical and lawful behaviour.
4. Financial statements
   1. satisfy itself that the financial statements have been effectively audited and reviewed, including whether appropriate action has been taken in response to audit recommendations and adjustments;
   2. provide advice to Council regarding the Committee's review of the process used for the preparation of the financial statements;
   3. satisfy itself that the financial statements are supported by appropriate management signoff on the statements and on the adequacy of the systems of internal controls;
   4. review the processes in place designed to ensure that financial information included in the University of New England's annual report is consistent with the signed financial statements;
   5. review significant accounting and reporting issues, including complex or unusual transactions, and understand their impact on the financial statements;
5. Compliance
   1. review the currency, comprehensiveness and relevance of the University's Compliance Rule;
   2. determine whether management has appropriately considered compliance risks as part of the University of New England's risk assessment and management arrangements;
   3. review the effectiveness of the University's compliance system for addressing UNE's compliance obligations under relevant legislation; and
   4. review the effectiveness of the system for monitoring compliance by the University of New England's controlled entities with applicable laws and regulations, and associated government policies.
6. External audit
   1. act as a forum for communication between the University of New England, senior management and external audit;
   2. provide input and feedback on the financial statements and performance audit coverage proposed by external audit and provide feedback on the audit services provided;
   3. review all external plans and reports in respect of planned or completed audits and monitor management's implementation of audit recommendations; and
   4. provide advice to the Council on action taken on significant issues raised in relevant external audit reports and better practice guides.
7. Responsibilities of Members
   1. members are expected to:
      1. contribute the time needed to study and understand the papers provided;
      2. apply good analytical skills, objectivity and good judgement; and
      3. express opinions frankly, ask questions that go to the fundamental core of the issue and pursue independent lines of enquiry.

Section 7 - Reporting

(25) The Committee will regularly (at least once a year) report to the Council on its operation and activities during the year. The report should include:

1. a summary of the work the Committee performed to fully discharge its responsibilities during the preceding year;
2. a summary of the University of New England's progress in addressing the findings and recommendations made in internal and external reports;
3. an overall assessment of the University of New England's risk, control and compliance framework, including details of any significant emerging risks or legislative changes impacting the University of New England; and
4. details of meetings, including the number of meetings held during the relevant period, and the number of meetings each member attended.

(26) The Committee may at any time, report to the Council any other matter it deems of sufficient importance to do so.

Section 8 - Reporting lines

(27) The Committee must at all times ensure it maintains a direct reporting line to and from the Head, Internal Audit (or equivalent role) and act as a mechanism for reporting internal audit activity to the Council, as appropriate.

(28) The Head, Internal Audit (or equivalent role) reports functionally to the Audit and Risk Committee and administratively to the Director Governance and University Secretary to facilitate day to day operations. If required, the Head, Internal Audit (or equivalent role) has the ability to report directly to the Vice-Chancellor and Chief Executive Officer and to Council through the Chancellor and the Audit and Risk Committee through the Chair.

Section 9 - Conduct of Committee business

Reporting to Council

(29) The Chair of the Committee will report to Council regularly on the business conducted by the Committee.

Meetings

(30) The Committee will meet bi-monthly, or otherwise as required in order to perform its functions. Committee members should be given at least seven days' notice of meeting, or such shorter notice period as is practicable where the matter is urgent.

(31) A work plan, including meeting dates and agenda items, will be agreed by the Committee each year.

(32) The Committee will meet separately of management with the internal and external auditors at least once a year.

(33) A meeting separate of management between the Committee and the Head, Internal Audit (or equivalent role) may be convened by the Chair of the Audit and Risk Committee if required.

Business papers

(34) Unless the Chair directs otherwise, Committee business papers will be distributed to Committee members and official attendees, at least seven days prior to the meeting, or such shorter period as is practicable in the circumstances. Business papers must be treated confidentially by recipients. Any external disclosure of business papers should be made via the University Secretary.

Quorum

(35) A quorum shall consist of a simple majority of the members of the Committee at the time the meeting is held.

Use of technology

(36) For its business papers, meetings and otherwise to conduct its business the Committee and its members may use technology including telephone, video-conferencing, telepresence, email and internet as arranged by the Chair and/or University Secretary.

Resolutions

(37) The Committee may pass a resolution by "flying minute" provided that the resolution has been approved by a simple majority of the Committee members at the time the resolution is made.

Confirmation of minutes

(38) Draft minutes will normally be circulated to members for comment promptly after each meeting. Next the minutes (with any necessary changes) will be circulated for adoption by the Committee. The minutes will be finalised and adopted when they have been approved by a majority of the members present at the relevant meeting. Alternatively, the minutes may be included in the business papers for the next Committee meeting and considered/adopted by the Committee at that meeting.

Self Review

(39) Once in every twelve-month period, the Committee shall devote at least part of one meeting to the review of its policies, practices and procedures over the preceding 12 months. The review will be conducted on a self-assessment basis (unless otherwise determined by the Council) with appropriate input sought from the Council, the internal and external auditors, management and any other relevant stakeholders, as determined by the Council.

Secretary to Committee

(40) The University Secretary and/or nominee will act as secretary and provide administrative support to the Committee.

Standing Orders

(41) To the extent of any inconsistencies between these Terms of Reference and the Council's Standing Orders, these Terms of Reference prevail.

Dispute Resolution

(42) Members of the Committee and the University of New England's Management should maintain an effective working relationship, and seek to resolve differences by way of open negotiation. However, in the event of a disagreement between the Committee and Management, including the Vice-Chancellor and Chief Executive Officer, the Chair may, as a last resort, refer the matter to the Council.

Conflicts of interest

(43) Once a year the Committee members will provide written declarations to the Council stating they do not have any conflicts of interest that would preclude them from being members of the Committee.

(44) Committee members must declare any conflicts of interest at the start of each meeting or before discussion of the relevant agenda item or topic. Details of any conflicts of interest should be appropriately minuted. In these circumstances, it may be appropriate to excuse the relevant member(s) from Committee deliberations on the item or topic where a conflict of interest exists.

Induction

(45) New members will receive relevant information and briefings on their appointment to assist them to meet their Committee responsibilities.

Review of Charter

(46) At least once a year the Committee will review this Charter. This review will include consultation with the Council. Any substantive changes to this Charter will be recommended by the Committee and formally approved by the Council.

Section 10 - Definitions and interpretation

Definitions

(47) Words and phrases used in this document have the following meanings, unless the context requires otherwise:

1. Lay means a person who is not a Current Employee or Current Student.
2. Management (for the purpose of these Definitions) means the Senior Executive, the Vice-Chancellor and Chief Executive Officer and the Vice-Chancellor and Chief Executive Officer's direct reports (excluding support staff) as well as the Chief Audit Executive and other managers reporting to the Audit and Risk Committee.

Interpretation

(48) This document should be interpreted using the following principles:

1. Where Committee membership is defined by reference to an office held (for example "Chair of Finance and Infrastructure Committee"), that office-bearer is a member ex-officio and has all of the same rights and responsibilities (including voting) as other Committee members whilst holding the office specified.
2. This document does not override or otherwise affect:
   1. the Authorities Retained by Council Rule; or
   2. the Vice-Chancellor Functions Rule; however it operates as a delegation of certain authorities that have been retained by Council.