The activity of the internal control system in special budgetary public administrations and a case study at a state university

The existence and effective operation of an internal control system in an enterprise is crucial to ensure the entity achieves its objectives and it assures the legality of the operations and transactions it has undertaken to achieve these objectives. The internal control system has five components; control environment, risk, control activities, observation, information, and communication. There is not much research related to the risk-focused internal audit. In this context, this thesis aims to present current state of risk-based internal audit in Turkey and in public institutions, to define and rate the risks in the Economics and Administrative Science Faculty, and to make suggestions in the context of preventive, preventive and detective control activities. The risk assessment which will be conducted within the scope of the research and as a result, suggestions will be made on the control activities which are another element of the internal control system. The literature review suggested that there was no study on the risk assessment of a private budgeted public institution in Turkey using the risk matrix method. As a result of this research, reporting of the financial affairs unit in the budget preparation process, irregularities in the process of movable goods, financial in the procurement process, complexity of the activities in the procurement process and legislative risks in all processes are determined as high-grade risks. In terms of financial and information technology risks, the personal affairs unit is identified as high-grade risks when it comes to additional course and salary processes.