New on Finance Matters: UVA Office of Audit & Compliance and UVA Financial Compliance

Carolyn Saint, Gary Nimax,
JJ Sullivan, and Christine Kennedy-Tyburski

What's the difference between UVA's Audit & Compliance department and UVAFinance's Compliance Team? What do they do, how do they work with people across Grounds, and how can we best work with them? 

Carolyn Saint and Gary Nimax from Audit & Compliance, along with JJ Sullivan and Christine Kennedy-Tyburski of UVAFinance Compliance, join Patty and Brandi on this episode of Finance Matters to give answers and insights into these two vital functions.  

Listen in below!

See the show notes posted below for easy access to resources mentioned in the pod, plus a quick recap of the the main points of the podcast. 


Recap of Important Points


What’s the Difference Between UVAFinance Compliance and The Office of Audit & Compliance at UVA? 

  • UVAFinance Compliance: Focuses on risk management and internal controls through a consultative and investigative approach. Works with internal and external auditors to ensure processes align with organizational goals and policies.  
  • Office of Audit & Compliance: Institutional Compliance: Ensures adherence to regulations and organizational policies using a charter-based program guided by federal standards. Maintains a compliance helpline to report suspected compliance concerns, which may be done anonymously if necessary. Facilitates collaboration across the University through a compliance network.  UVA Audit: Internal audit plans are based on risk assessments and a two-year plan is approved annually in the June meeting of the Audit, Compliance, and Risk Committee of the Board of Visitors. The plan is updated as needed based on changes in organizational priorities or resources. 

Both teams are partners in fostering a culture of accountability, collaboration, and effective risk management at UVA. 


Key Points: 

  • Audit operates independently as assurance providers, advisors, and occasionally, investigators. 
  • Compliance integrates more directly with teams, helping implement solutions while upholding policies. 
  • Audit and Compliance are not just about "catching mistakes"; they aim to empower departments to achieve their goals effectively and safely. 

How to Work with Them: 


Resources Mentioned: