Tenn. Code Ann. § 9-18-104: Report by head of executive agency

(a) By December 31, 2008, initially, and then by December 31 of every year thereafter, the head of each state agency and higher education institution shall, on the basis of the evaluations conducted in accordance with guidelines prescribed under § 9-18-103 , prepare and transmit to the commissioner of finance and administration and the comptroller of the treasury a report that states that: (1) The agency or institution acknowledges its management's responsibility for establishing, implementing and maintaining an adequate system of internal control; and (2) A management assessment of risk performed by the agency or institution provides or does not provide reasonable assurance of compliance with the objectives of the assessment as specified in this chapter. (b) In the event that the agency's or institution's assessment does not provide reasonable assurance of compliance with the objectives of the assessment as stated in this chapter, the report shall include a corrective action plan that identifies: (1) Any significant deficiencies or material weaknesses in the agency's or institution's system of internal control and/or lack of risk mitigating control activity; and (2) The plans and the schedule for correcting the weaknesses. Acts 1983, ch. 129, § 1; 1998, ch. 664, §§4 - 6; 2008 , ch. 750, §3; 2009 , ch. 99, § 1.

(a) By December 31, 2008, initially, and then by December 31 of every year thereafter, the head of each state agency and higher education institution shall, on the basis of the evaluations conducted in accordance with guidelines prescribed under § 9-18-103 , prepare and transmit to the commissioner of finance and administration and the comptroller of the treasury a report that states that: (1) The agency or institution acknowledges its management's responsibility for establishing, implementing and maintaining an adequate system of internal control; and (2) A management assessment of risk performed by the agency or institution provides or does not provide reasonable assurance of compliance with the objectives of the assessment as specified in this chapter.

(1) The agency or institution acknowledges its management's responsibility for establishing, implementing and maintaining an adequate system of internal control; and

(2) A management assessment of risk performed by the agency or institution provides or does not provide reasonable assurance of compliance with the objectives of the assessment as specified in this chapter.

(b) In the event that the agency's or institution's assessment does not provide reasonable assurance of compliance with the objectives of the assessment as stated in this chapter, the report shall include a corrective action plan that identifies: (1) Any significant deficiencies or material weaknesses in the agency's or institution's system of internal control and/or lack of risk mitigating control activity; and (2) The plans and the schedule for correcting the weaknesses.

(1) Any significant deficiencies or material weaknesses in the agency's or institution's system of internal control and/or lack of risk mitigating control activity; and

(2) The plans and the schedule for correcting the weaknesses.