Website profiles · Technology insights · Alternatives

internalaudit.ku.edu

No paid content found
Visit website
Profile views 9 Outbound visits 12 Normal
Internal Audit Full homepage screenshot

At a glance

Category
Education & Learning
Language
English
Paid-content signal
No paid content foundObserved
Registered
Unknown
Hosting
ku.eduInferred
HTTPS certificate trusted
PassedObserved
Last updated

Website review

This review may include AI-generated content and is not individually verified. Domain, certificate and other facts come from the observed data on this page.

What is Internal Audit?

Internal audit is an independent, objective function that helps an organization improve its operations. At a university, it typically reviews financial, operational and compliance processes, then reports findings to leadership and the governing board. The aim is not to punish mistakes but to identify risks, test controls and recommend practical fixes.

On Internal Audit at the University of Kansas, the function is positioned as an internal service to the institution. Its work commonly covers areas such as:

  • Financial reporting and cash handling
  • Purchasing, travel and expense processes
  • Research grant compliance
  • Information technology and data security
  • Regulatory and policy adherence

Who it serves

Internal audit serves trustees, administrators and departments. Faculty and staff may interact with auditors during a review, while external auditors and regulators may rely on internal audit's work to reduce duplication.

How it differs from external audit

Aspect Internal audit External audit
Primary focus Risk, controls, operations Financial statements
Reporting line Management and board Governing body and public
Timing Continuous or cyclical Periodic

Internal audit is suited to organizations that want early warning of problems and a structured way to strengthen accountability. Its independence is what allows it to raise uncomfortable issues without being tied to the areas it reviews.

What services does the Internal Audit department at KU provide?

The Internal Audit department at the University of Kansas (KU) provides independent, objective assurance and consulting services designed to add value and improve the university's operations. Its work typically focuses on evaluating the effectiveness of risk management, internal controls, and governance processes across KU.

Common services include:

  • Assurance and audit engagements – examining financial, operational, and compliance activities to verify that controls work as intended.
  • Advisory and consulting services – offering guidance on process improvements, system implementations, and policy development without assuming management responsibilities.
  • Risk assessment – helping identify and prioritize risks facing departments and the university as a whole.
  • Investigations – reviewing reports of suspected fraud, waste, or misuse of university resources.
  • Follow-up reviews – monitoring whether management has implemented agreed-upon corrective actions.

The department serves KU leadership, academic and administrative units, and the Kansas Board of Regents by reporting findings and recommendations. Audiences may include deans, department heads, and staff who need an independent view of their controls. A key trade-off is that internal audit must remain independent while still being useful; consulting work can improve operations but must not compromise the objectivity needed for assurance. Because the site is hosted at Internal Audit, specific service descriptions, reporting lines, and contact details are best confirmed there.

How does Internal Audit help the university manage risks?

Internal Audit at the University of Kansas supports risk management by providing independent, objective reviews of the university's operations, controls and compliance obligations. Rather than owning or operating risk, the office examines how well risks are identified, measured and mitigated across departments, then reports findings and recommendations to university leadership and the governing board.

Its work typically covers:

  • Financial and operational controls — reviewing processes such as purchasing, cash handling and payroll to confirm that safeguards work as intended.
  • Compliance — checking adherence to laws, regulations, sponsor requirements and university policies.
  • Information systems — assessing access controls, data integrity and system-related risks.
  • Fraud and misconduct — investigating allegations and evaluating the controls meant to prevent them.
  • Advisory and consulting work — offering guidance on new systems, projects or process changes before problems arise.

A key benefit is the reporting line: findings generally reach senior administrators and the audit committee, giving decision-makers an independent view. Audiences include deans, department heads, principal investigators and staff who manage day-to-day controls. The trade-off is that audits consume staff time and can surface uncomfortable findings, and internal audit cannot eliminate risk — it provides assurance and recommendations that management must act on. For current scope, charter and reporting details, see Internal Audit.

What is the process for reporting suspected fraud or misconduct at KU?

The University of Kansas Internal Audit department provides a channel for reporting suspected fraud, waste, abuse or misconduct. According to the office's public information, reports can typically be submitted through a dedicated reporting hotline or web portal, and may be made anonymously where permitted by university policy and applicable law.

How reports are generally handled

  • Intake: A report is received by Internal Audit or the designated reporting service.
  • Review: Staff assess whether the concern falls within their scope or should be referred to another office, such as Human Resources or the university police.
  • Investigation: Qualified personnel gather information, interview relevant parties and document findings.
  • Resolution: Results may lead to disciplinary action, process changes or referral to law enforcement.

Who should use it

This process suits students, faculty, staff and others who suspect financial impropriety, conflicts of interest, misuse of university resources or similar issues. It is not the right route for emergencies, which should go to campus police or emergency services, nor for routine HR complaints that have their own procedures.

Practical considerations

Anonymous reporting can encourage disclosure but may limit investigators' ability to ask follow-up questions. Providing specific details—dates, locations, people involved and documentation—generally helps. Retaliation against good-faith reporters is typically prohibited.

For current contact details and any online form, consult KU Internal Audit.

Who leads the Internal Audit department at KU?

The Internal Audit department at the University of Kansas is an institutional function that reports on governance, risk management and internal controls rather than serving external clients. Its work is aimed at university leadership, the governing board and audit committees, who use audit findings to assess compliance, financial reporting and operational efficiency.

Who leads it

The department is typically headed by a chief audit executive, often titled Director of Internal Audit or Chief Audit Officer. In university settings, this leader usually reports functionally to the audit committee of the governing board and administratively to a senior executive such as the chancellor or vice provost, a structure designed to preserve independence. The specific person holding the role can change, so the current name is best confirmed through the department's official site, Internal Audit.

What the leader is responsible for

  • Setting the annual audit plan based on institutional risk
  • Directing financial, operational, compliance and IT audits
  • Presenting results and recommendations to the audit committee
  • Coordinating with external auditors and monitoring follow-up on findings

Audience and trade-offs

The primary audience is internal: trustees, executives and department managers. Students or the public looking for consumer-style information may find the material technical. A benefit of a dedicated internal audit office is independent, institution-specific oversight; a limitation is that it does not replace external audits or public financial disclosures.

How can I contact the Internal Audit office at KU?

Contacting KU Internal Audit

The Internal Audit office at the University of Kansas (KU) supports the university community by providing independent, objective reviews of governance, risk management and internal controls. Its website at Internal Audit is the primary source for contact details, so check the site directly for the current phone number, email address and office location.

Who typically reaches out

  • KU staff and faculty seeking guidance on policies, controls or reporting concerns
  • Department administrators arranging an audit or requesting advisory services
  • Students or members of the public with a question about university accountability

What to expect

Most offices of this kind publish a general office email, a main phone line and a campus mailing address. Some also offer a confidential reporting channel for suspected fraud, waste or misuse of university resources. If you are unsure who to contact, the main office line is usually the safest starting point; staff can route your query to the right auditor.

Practical tips

  • Have your department name, a brief description of the issue and any relevant dates ready.
  • For sensitive matters, ask about confidentiality before sharing details by email.
  • Avoid sending personal or financial information through unsecured channels.

Because contact information can change, confirm details on the official site rather than relying on older directories.

Related questions

More questions →
What services does KU Internal Audit offer?

KU Internal Audit provides four services listed on its homepage: IT & Privacy Risk Assessments, Leadership Transition Reviews, Annual Financial Certification, and Audits. It also conducts operational, compliance, and financial-related audits and investigations for the University of Kansas. These services are aimed at university units and are used to support risk management and compliance. Each service has a "Read More" link on the site for additional detail.

The four services at a glance

Service What it generally covers
IT & Privacy Risk Assessments Reviews of technology and privacy-related risks
Leadership Transition Reviews Reviews tied to changes in leadership
Annual Financial Certification The university's yearly financial certification process
Audits Operational, compliance, and financial-related audits

What Internal Audit does overall

According to the department's homepage, Internal Audit "conducts operational, compliance, and financial-related audits and investigations for the University of Kansas." That statement frames all four services: they are internal functions serving the university, not services offered to the general public.

How to get more detail on each service

The homepage lists each service with its own "Read More" link. If you need specifics on scope, timing, or what a review involves, follow the link for that service rather than relying on the summary above.

Reporting an incident

The homepage also features a KU Hotline section, pointing to a separate page on how to report an incident. That is a distinct channel from the four services listed above.

Contact

Internal Audit is located at Strong Hall, 1450 Jayhawk Blvd., Lawrence, KS 66045. Contact: [email protected] or 785-864-2700.

How to Contact KU Internal Audit

Contact the University of Kansas Internal Audit office by email at [email protected], by phone at 785-864-2700, or in person at Strong Hall, 1450 Jayhawk Blvd., Lawrence, KS 66045. Use the KU Hotline instead if you need to report an incident.

Contact details

Method Detail
Email [email protected]
Phone 785-864-2700
Address Strong Hall, 1450 Jayhawk Blvd., Lawrence, KS 66045
Website internalaudit.ku.edu

Reporting an incident: use the KU Hotline

The Internal Audit homepage separates two paths: general contact with the office, and incident reporting. If your purpose is to report an incident, the site points to the KU Hotline, described as the channel for learning how to report an incident. Start there rather than sending a report to the general office email.

What the office handles

Internal Audit conducts operational, compliance, and financial-related audits and investigations for the University of Kansas. Its listed services are:

  • IT & Privacy Risk Assessments
  • Leadership Transition Reviews
  • Annual Financial Certification
  • Audits

Knowing which category your question falls into helps you describe it clearly when you call or write.

Where the office sits in the university structure

The site links Internal Audit alongside the Office of the Chancellor, the Office of Business & Financial Planning, the Office of Integrity & Compliance, and the Office of Global Operations & Security. If your concern is about compliance or integrity rather than an audit matter, one of those offices may be the more direct route — the KU Hotline remains the entry point for reporting incidents.

Before you reach out

  • For an audit, risk assessment, or financial certification question, email or call the office directly with the department or unit involved and a short description of what you need.
  • For an incident report, go to the KU Hotline first.
  • For accessibility issues with the website itself, the site lists a separate website support link in its footer.
How to Report an Incident Through the KU Hotline

The KU Hotline is the reporting channel featured on the Internal Audit homepage at internalaudit.ku.edu. The site describes it as the place to "learn more about the hotline and how to report an incident," so the homepage is your starting point: follow the KU Hotline link there to reach the page that explains the specific submission methods. If you would rather contact the office directly, Internal Audit lists [email protected] and 785-864-2700.

What the KU Hotline is for

The homepage presents the KU Hotline as the entry point for reporting an incident or concern. The site does not spell out on the homepage which categories of incidents the hotline covers, so treat the KU Hotline page itself as the authoritative source for scope, eligibility, and what happens after you submit.

How to get to the reporting instructions

  1. Go to internalaudit.ku.edu.
  2. Find the KU Hotline heading near the top of the page.
  3. Follow the KU Hotline link to open the page about the hotline and how to report an incident.
  4. Use the submission method described on that page.

The homepage only tells you that the hotline exists and that reporting instructions live on its own page; it does not list a phone number, form, or email for the hotline itself. That is why the link matters — the actual steps are one level deeper.

Other ways to reach Internal Audit

If your question is not an incident report, or you want to speak with the office first, the homepage lists these contact details:

Contact Detail
Email [email protected]
Phone 785-864-2700
Address Strong Hall, 1450 Jayhawk Blvd., Lawrence, KS 66045

What Internal Audit handles

Knowing whether your concern belongs with Internal Audit can save a step. The homepage states that Internal Audit "conducts operational, compliance, and financial-related audits and investigations for the University of Kansas." Its listed services are:

  • IT & Privacy Risk Assessments
  • Leadership Transition Reviews
  • Annual Financial Certification
  • Audits

If your report falls outside audit and investigation work, the KU Hotline page is still the right place to check, since it is presented as the general incident-reporting route.

Common sticking points

  • Expecting a form on the homepage. The homepage only links out; the reporting method is described on the KU Hotline page.
  • Assuming the hotline is the same as the office email. They are listed separately. Use the hotline for incident reports and [email protected] for general contact.
  • Guessing at anonymity or follow-up. The homepage does not state whether reports are anonymous or what response time to expect. Confirm those details on the KU Hotline page before you rely on them.
What does Internal Audit do at the University of Kansas?

Internal Audit at the University of Kansas conducts operational, compliance, and financial-related audits and investigations for the university. Its work is aimed at university departments and units rather than outside businesses, and the office also provides related services such as IT and privacy risk assessments, leadership transition reviews, and annual financial certification.

What the office covers

According to the Internal Audit homepage, the office's core work falls into three broad categories plus investigations:

  • Operational audits — reviewing how a unit or process actually functions, with an eye toward improving it.
  • Compliance audits — checking whether university activities follow applicable rules, policies, and requirements.
  • Financial-related audits — examining financial activity and controls.
  • Investigations — looking into incidents or concerns that fall within the office's scope.

The stated purpose is to help the university manage risk, improve processes, and meet compliance obligations. That framing matters: the function is internal to KU and oriented toward the institution's own operations, not toward producing public financial statements for investors or regulators the way an external audit firm would.

Services listed on the site

The homepage's "Our Services" section names four offerings, each with a "Read More" link:

Service What it suggests
IT & Privacy Risk Assessments Reviews focused on technology and privacy exposure
Leadership Transition Reviews Reviews tied to changes in unit leadership
Annual Financial Certification A recurring certification process
Audits The general audit function described above

The site does not publish detailed scope, timelines, or criteria for these services on the homepage, so specific questions about a given engagement are best directed to the office.

Reporting an incident: the KU Hotline

The homepage gives prominent placement to the KU Hotline, described as the way to "learn more about the hotline and how to report an incident." If your reason for visiting the site is to report something rather than to understand the audit function, the hotline page is the relevant entry point.

Contact and location

  • Address: Strong Hall, 1450 Jayhawk Blvd., Lawrence, KS 66045
  • Email: [email protected]
  • Phone: 785-864-2700

The office sits alongside other administrative units listed in the site footer, including the Office of the Chancellor, the Office of Business & Financial Planning, the Office of Integrity & Compliance, and the Office of Global Operations & Security.

Who this is for

If you work in a KU department or unit and want to understand how internal audit interacts with your operations — or you need to report a concern — this is the right office. If you are looking for the university's externally published financial statements or for an independent external audit opinion, that is a different function and a different source.

What is the Internal Audit website for the University of Kansas?

internalaudit.ku.edu is the official website of the University of Kansas (KU) Internal Audit office. It serves as the public-facing hub for the department that conducts operational, compliance, and financial-related audits and investigations for the university. The site is aimed at KU community members and others who need to understand the office's role, access its services, or report an incident through the KU Hotline.

What the office does

According to the site, Internal Audit "conducts operational, compliance, and financial-related audits and investigations for the University of Kansas." This means its scope covers:

  • Operational audits — reviewing how university units run their processes.
  • Compliance audits — checking adherence to policies, regulations, and requirements.
  • Financial-related audits — examining financial activities and controls.
  • Investigations — looking into incidents or concerns raised through reporting channels.

Services listed on the site

The homepage presents four main service areas, each with a "Read More" link:

Service What it covers (per site listing)
IT & Privacy Risk Assessments Assessing technology and privacy-related risks
Leadership Transition Reviews Reviews tied to changes in leadership
Annual Financial Certification The university's annual financial certification process
Audits General audit services

Reporting an incident: KU Hotline

The site highlights the KU Hotline prominently, with a prompt to "Learn more about the hotline and how to report an incident." This is the channel the office points to for reporting concerns. The homepage links to a dedicated KU Hotline page for details on how to submit a report.

Contact information

The site provides direct contact details for the office:

  • Address: Strong Hall, 1450 Jayhawk Blvd., Lawrence, KS 66045
  • Email: [email protected]
  • Phone: 785-864-2700

Who the office reports alongside

The footer lists related university offices, including the Office of the Chancellor, Office of Business & Financial Planning, Office of Integrity & Compliance, and Office of Global Operations & Security. These links help visitors navigate to connected administrative functions.

Bottom line

If you need to understand KU's internal audit function, access one of its four listed services, or find out how to report an incident, internalaudit.ku.edu is the starting point. For direct questions, the office can be reached by email or phone at the contact details above.

Website Overview

Several search or sharing settings need attention. Together they may make snippets, preview images or preferred URLs less consistent across platforms.

Domain and Registration

Unknown

DNS and Email

Nameservers are provided by ku.edu, indicating managed DNS hosting. MX records point to the Microsoft 365 email service. CAA records restrict which certificate authorities are authorized to issue certificates. SPF and DMARC are configured. DKIM status is unknown. TXT records include verification markers for Google, Apple, Atlassian. Such markers may also remain after a service stops being used.

TLS and Certificates

The certificate includes the organization field University of Kansas. The public key uses EC with 384 bits. The server supplied a complete certificate chain. The certificate is valid for about 198 days in total, with 95 days remaining. The SAN includes a wildcard covering multiple hostnames at the same subdomain level. Shared private keys can increase the impact of a compromise.

HTTP and Browser Security

The response lacks these common security headers: CSP, X-Content-Type-Options, Permissions-Policy. No X-Powered-By header was found, reducing one common source of backend fingerprinting information. No obvious internal addresses or debug information were found in the headers. The Server header identifies nginx without an exact version. Cookie security attributes are unknown.

Technology Stack Analysis

The public page identifies Drupal 10 (https://www.drupal.org), Drupal, nginx without precise versions, leaving fewer clues for version-specific scanning.

Search and Social Sharing

No homepage meta description was detected, leaving snippet selection more dependent on page text. The Generator tag identifies Drupal 10 (https://www.drupal.org), making the publishing system easier to fingerprint. Open Graph is partially configured; og:description, og:type is missing. Twitter Card metadata is configured. The title has 25 characters, within a common display range.

Hosting and Email

DNSku.edu
Hostingku.edu
EmailMicrosoft 365
Approximate IP geolocation (inferred; a CDN or proxy may differ from the origin server) United States flagLawrence, Kansas, United States Inferred 129.237.135.235

Registration details

RDAP / WHOIS

Unknown

DNS records

DNS

TypeNameValueTTLPriority
Acms.ku.edu129.237.135.2353600—
MXku.eduku-edu.mail.protection.outlook.com360010
NSku.eduns1.ku.edu3600—
NSku.eduns2.ku.edu3600—
NSku.eduns4.ku.edu3600—
TXTku.eduAAN9AKL6LXPKZ9N7ESKASI4OKO7NQFFTPIFKBGTGD3600—
TXTku.eduSFMC-1jRt5ZkWEbhhVFb-IJCfIUaC3ArXUOLBhMIqQLfK3600—
TXTku.eduSFMC-ii6ek4xtAV4d6oupc54Powd7vO2ekYQY4eL_aJYu3600—
TXTku.eduapple-domain-verification=JhKfJomP9t7riHbm3600—
TXTku.eduasv=48acefc2e47d4b28b157a840e0a1d7843600—
TXTku.eduatlassian-domain-verification=gQCZy44gSs5Yx57YSpBxrMfmLMivsakMdzreSxsnjfNW6MvR14t2it4VYM4YzS9o3600—
TXTku.eduatlassian-domain-verification=hd9p3p0eZsHHSZykEaj9cUsC3OoqPYmaW4zCwEwqJuMFhPnO/Oqq48wXM00pa1103600—
TXTku.eduatlassian-domain-verification=wAajbyjQxjyyOTEBzp7eP+K/ca8h+MTLhCH3Pf8OGiHhj1DFkJOFcoq6LhPKqc+O3600—
TXTku.eduautodesk-domain-verification=qMG6J-b2W3t7FDzKDCcx3600—
TXTku.edud365mktkey=3ueavnqhjw5qfn7d21527vbre3600—
TXTku.edud365mktkey=4w2j821zye63c3hnlh0nyxpoi3600—
TXTku.edue2ma-verification=x7bgb3600—
TXTku.edugoogle-site-verification=3Tl0zBArHvPOpUbBMT7-11tzsjBm7wNlWgDjzCyNA8Q3600—
TXTku.edugoogle-site-verification=l2tSxHkgr5ZAiDpKrnBZq3u626h_PbdVnWIGwyI7iMU3600—
TXTku.edugoogle-site-verification=r7LEBI_MR5CuwNS_EwTv8rVxkEZ3j8BYbYYPGol3dok3600—
TXTku.edujamf-site-verification=8zLN0s4nAVvTuHSK8KA7rg3600—
TXTku.edupaloaltonetworks-site-verification=539d8b3d098f7cd4dbf70e46d51e26fa1a2494495f47fad2da938484a80ea5bb3600—
TXTku.edusmartsheet-site-validation=bXQOKEcoHu0i4aZzbnPcuCmrkyfYqgZv3600—
TXTku.edusuccessfactors-site-verification=OGExNzcwYmNiZDk1Y2U3MTljYTMxMTQ4MDc0ODJhMGFiNDA1Mzk2NDI1YTY0MWMzN2ZhOGI2ZmI2YmVhY2VjZQ==3600—
TXTku.eduv=spf1 include:spf.ku.edu include:spf_ext.ku.edu include:spf.protection.outlook.com include:_spf.qualtrics.com include:servers.mcsv.net include:mktomail.com include:e2ma.net ~all3600—
TXTku.eduwRKpeJXZH9um0P8Z8nHveU807tX/siME1gdYYbrhxs+dNygXN6XIdKzSjEndF7Zwc2rzqthffH96Dqzefm1K7Q==3600—
CNAMEinternalaudit.ku.educms.ku.edu3600—
CAAku.edu0 issue "sectigo.com"3600—
CAAku.edu0 issuemail "sectigo.com"3600—
DMARC_dmarc.ku.eduv=DMARC1; p=none; rua=mailto:[email protected]2688—

TLS and certificates

TLS / SSL

AssessmentNormal configuration
Supported protocolsTLSv1.2、TLSv1.3
Negotiated protocolTLSv1.3
Certificate subjectku.edu
IssuerInCommon, LLC
Valid until2026-12-26T23:59 · Remaining when checked: 95 days
Verification detailsCertificate trust: Passed · Hostname match: Passed

HTTP response headers

HTTP

HeaderValue
content-typetext/html; charset=UTF-8
content-languageen
cache-controlmust-revalidate, no-cache, private
servernginx
strict-transport-securitymax-age=31536000
x-frame-optionsSAMEORIGIN, SAMEORIGIN
x-content-type-optionsnosniff, nosniff
referrer-policystrict-origin-when-cross-origin
set-cookieRedacted

Identified technologies

Drupal 10 (https://www.drupal.org)Drupalnginx

Pages, Search and Sharing

Meta descriptionNot detected
Canonical URLhttps://internalaudit.ku.edu/
LanguageEnglish (default)
Twitter Cardsummary_large_image
All bots 18 allowed · 34 disallowed
  • Allow/core/*.css$
  • Allow/core/*.css?
  • Allow/core/*.js$
  • Allow/core/*.js?
  • Allow/core/*.gif
  • Allow/core/*.jpg
  • Allow/core/*.jpeg
  • Allow/core/*.png
  • Allow/core/*.svg
  • Allow/profiles/*.css$
  • Allow/profiles/*.css?
  • Allow/profiles/*.js$
  • Allow/profiles/*.js?
  • Allow/profiles/*.gif
  • Allow/profiles/*.jpg
  • Allow/profiles/*.jpeg
  • Allow/profiles/*.png
  • Allow/profiles/*.svg
  • Disallow/core/
  • Disallow/profiles/
  • Disallow/README.md
  • Disallow/composer/Metapackage/README.txt
  • Disallow/composer/Plugin/ProjectMessage/README.md
  • Disallow/composer/Plugin/Scaffold/README.md
  • Disallow/composer/Plugin/VendorHardening/README.txt
  • Disallow/composer/Template/README.txt
  • Disallow/modules/README.txt
  • Disallow/sites/README.txt
  • Disallow/themes/README.txt
  • Disallow/web.config
  • Disallow/admin/
  • Disallow/comment/reply/
  • Disallow/filter/tips
  • Disallow/node/add/
  • Disallow/search/
  • Disallow/user/register
  • Disallow/user/password
  • Disallow/user/login
  • Disallow/user/logout
  • Disallow/media/oembed
  • Disallow/*/media/oembed
  • Disallow/index.php/admin/
  • Disallow/index.php/comment/reply/
  • Disallow/index.php/filter/tips
  • Disallow/index.php/node/add/
  • Disallow/index.php/search/
  • Disallow/index.php/user/password
  • Disallow/index.php/user/register
  • Disallow/index.php/user/login
  • Disallow/index.php/user/logout
  • Disallow/index.php/media/oembed
  • Disallow/index.php/*/media/oembed

User reviews (0)

  • No reviews yet.