University of Oregon 2019 Annual Financial Report
Report on Internal Control Over Compliance
Management of UO is responsible for establishing and maintaining effective internal control over
compliance with the types of compliance requirements referred to above. In planning and performing
our audit of compliance, we considered UO's internal control over compliance with the types of
requirements that could have a direct and material effect on each major federal program to determine
the auditing procedures that are appropriate in the circumstances for the purpose of expressing an
opinion on compliance for each major federal program and to test and report on internal control over
compliance in accordance with the Uniform Guidance, but not for the purpose of expressing an
opinion on the effectiveness of internal control over compliance. Accordingly, we do not express an
opinion on the effectiveness of UO's internal control over compliance.
A deficiency in internal control over compliance exists when the design or operation of a control over
compliance does not allow management or employees, in the normal course of performing their
assigned functions, to prevent, or detect and correct, noncompliance with a type of compliance
requirement of a federal program on a timely basis. A material weakness in internal control over
compliance is a deficiency, or a combination of deficiencies, in internal control over compliance such
that there is a reasonable possibility that material noncompliance with a type of compliance
requirement of a federal program will not be prevented, or detected and corrected, on a timely basis.
A significant deficiency in internal control over compliance is a deficiency, or a combination of
deficiencies, in internal control over compliance with a type of compliance requirement of a federal
program that is less severe than a material weakness in internal control over compliance, yet
important enough to merit attention by those charged with governance.
Our consideration of internal control over compliance was for the limited purpose described in the first
paragraph of this section and was not designed to identify all deficiencies in internal control over
compliance that might be material weaknesses or significant deficiencies. We did not identify any
deficiencies in internal control over compliance that we consider to be material weaknesses.
However, material weaknesses may exist that have not been identified.
The purpose of this report on internal control over compliance is solely to describe the scope of our
testing of internal control over compliance and the results of that testing based on the requirements of
the Uniform Guidance. Accordingly, this report is not suitable for any other purpose.
Moss Adams LLP
Portland, Oregon
October 31, 2019
52 University of OregonView entire presentation