Each year, the Chief Audit Officer develops an audit plan for the University. Using a risk-based methodology ... Field work is typically the longest phase of the audit, as IACS staff will be gathering ...