Audit committee approves FY2027 internal audit plan; audit finds physical-security issue at Boyd Health Services

The Audit Committee of the Austin Peay State University Board of Trustees approved the proposed fiscal year 2027 internal audit plan in June 2026, and heard that an audit of Boyd Health Services identified a reportable physical-security issue for which access controls are expected to be tightened by the end of June.

Mr. Blayne Clements, chief audit officer for the university’s Office of Internal Audit, told trustees the annual audit plan is based on staffing, available time and the office’s annual risk analysis and that stakeholders including the audit committee and the university president provided input. "The first thing I want to highlight is the annual audit of the president's office, which is required by law," Clements said, noting the office also performs periodic and external quality-assurance reviews.

Clements said the office conducts university-wide audits—this year covering credit-card and travel expenses, with specific attention to athletics—and prioritizes institutional support and financial management. He described a multi-tier quality-assurance process, saying an external review last occurred in 2023 and the next external review is planned for fall 2028. "Our standards changed last January," he added, and the periodic internal assessment is a deeper dive to ensure compliance.

When Trustee Roe asked about the unit’s biggest challenge, Clements said the primary difficulty is allocating limited staff time across a complex university environment; he characterized the office as "right sized" but noted the difficulty of covering all auditable areas.

Trustee Kimbrough moved to approve the proposed internal audit plan for fiscal year 2027 and Trustee Rainey seconded. Committee members signified "aye," and the motion carried to approve the plan as written. The transcript records the ayes but does not provide a numerical roll call.

On an information item, Clements reported that an audit of Boyd Health Services produced a reportable issue concerning physical security. "We did have a reportable issue regarding physical security," he said, and indicated that access-management changes "will have that done by the end of June," after which the office will follow up and expects the outstanding recommendation to be removed.

The committee received the update as an information item and adjourned the public session. No formal vote was recorded on the Boyd Health Services follow-up; Clements said staff will verify implementation and report back.