We try to employ the 80/20 rule. We look at dollar cutoffs where we get as close as we can to auditing 20% of the transactions, covering 80% of the dollars. So, at UC Berkeley, that translates to auditing everything for travel above $1,000. No audits are done on travel reimbursements under $1,000 and that results in us auditing roughly 17% of the transactions and 75% of the dollars.

We audit 100% at this time.

30% at Vanderbilt

Audit rules apply to additional expense reports to include 60 day rule, keywords and miscellaneous expenses.

We audit 100% of our travel vouchers at TTUHSC.

At W&M we audit 100% of expense reports

I'm surprised how many Universities are auditing 100%. I'd encourage you to reach out to your internal audit department. Our internal and external auditors all agree that the primary responsibility is the expense approver, which in the case of UC Berkeley, resides in the department. So, by the time the expense report comes to us, it has already been approved by the expense approver. If we had more sophisticated software, we'd audit even less than 17% of the transactions, if we could flag high risk activity. I've been managing these kinds of operations for nearly 30 years and never audited more than 15-20% (using the 80/20 rule) and all the Controllers I have worked for and both internal and external auditors have signed off on our operations, without any significant findings.

We process both Travel and PCard through our expense software system so we do look at 100% only to ensure that we catch any invoices for which we need to add use tax. If it's strictly travel we do a more cursory review.

As a state institution we are required to audit 100% of the expense forms. The state also reviews them before the reimbursement is issued.

At Caltech we have a one card solution and also have P-Card (goods and services) and Travel transactions running through the same system but separated by policy. We utilize Concur and have built in audit rules within our Concur system to auto stop reports; based on the rules below my Travel group audits about 60%.

Travel audit rules:
• All non-federal travel reports above a $ threshold are stopped
• All travel reports with First and Business class travel are stopped
• All federal reports are stopped
• We also built in a random audit where the system stops every 5th report submitted