REPORT DIGEST

STATE UNIVERSITIES RETIREMENT SYSTEM

COMPLIANCE EXAMINATION
FOR THE TWO YEARS ENDED JUNE 30, 2025

Release Date:  June 30, 2026

FINDINGS THIS AUDIT: 1

CATEGORY:  NEW -- REPEAT – TOTAL
Category 1:  0 -- 0 -- 0
Category 2:  1 -- 0 -- 1
Category 3:  0 -- 0 -- 0
TOTAL:  1 -- 0 -- 1

FINDINGS LAST AUDIT: 4

State of Illinois, Office of the Auditor
General
CHRISTOPHER B. MEISTER, AUDITOR GENERAL

To obtain a copy of the Report contact:
Office of the Auditor General, 400 West
Monroe, Suite 306, Springfield, IL
62704-9849
(217) 782-6046 or TTY (888) 261-2887

This Report Digest and Full Report are
also available on the worldwide web at
www.auditor.illinois.gov

INTRODUCTION

This digest covers the compliance
examination of the State Universities
Retirement System (System) for the two
years ended June 30, 2025.  A digest
covering the System’s Financial Audit as
of and for the year ended June 30, 2025,
was previously released on January 13,
2026.  This report contains 1 finding.
The financial audit report contained no
findings.

SYNOPSIS

• (25-01) The System did not have adequate
controls in place over user access to one
of its Information Technology systems.

FINDINGS, CONCLUSIONS, AND RECOMMENDATIONS

INADEQUATE CONTROLS OVER USER ACCESS

The System did not have adequate controls
in place over user access to one of its
Information Technology (IT) systems.

The System relies on its computing
environment for maintaining several
critical, sensitive, and/or confidential
systems for financial reporting and
meeting its mission.  During testing of
application user access of an internal
system, we identified that 3 of 27 (11%)
users sampled were assigned access rights
that were not appropriately aligned with
their respective job responsibilities.
(Finding 1, page 8)

We recommended the System strengthen its
existing user access review processes to
ensure access rights remain appropriately
aligned with job responsibilities.  This
should include enhancing the level of
detail and scrutiny applied during
periodic reviews, implementing procedures
to more timely identify and correct
inappropriate access, and ensuring that
changes in job responsibilities are
promptly reflected in user access levels.

System officials accepted the finding and
indicated they will strengthen the
existing access review process.

AUDITOR’S OPINION

The financial audit report was previously
released.  The auditors stated the
financial statements of the System as of
and for the year ended June 30, 2025, are
fairly stated in all material respects.

ACCOUNTANT’S OPINION

The accountants conducted a State
compliance examination of the System for
the two years ended June 30, 2025, as
required by the Illinois State Auditing
Act.  The accountants stated the System
complied, in all material respects, with
the requirements described in the report.

This State compliance examination was
conducted by RSM US, LLP.

COURTNEY DZIERWA
Deputy Auditor General

This report is transmitted in accordance
with Section 3-14 of the Illinois State
Auditing Act.

CHRISTOPHER B. MEISTER
Auditor General

CBM:EMR