N.Y. Pub. Auth. Law § 2930

§ 2930. Definitions. For the purposes of this title, the following\nterms shall have the following meanings:\n 1. "Internal control". A process that integrates the activities,\nplans, attitudes, policies, systems, resources and efforts of the people\nof an organization working together, and that is designed to provide\nreasonable assurance that the organization will achieve its objectives\nand mission. The objectives of an internal control system include, but\nare not limited to: the safeguarding of assets; checking the accuracy\nand reliability of accounting data and financial reporting; promoting\nthe effectiveness and efficiency of operations; ensuring compliance with\napplicable laws and regulations; and encouraging adherence to prescribed\nmanagerial policies. Internal control review processes are used\nperiodically to evaluate the ongoing internal control system and to\nassess and monitor the implementation of necessary corrective actions.\n 2. "Internal audit". An appraisal activity established by the\nmanagement of an organization for the review of operations as a means of\nassuring conformity with management policies and the effectiveness of\ninternal control, and conducted in conformance with generally accepted\nstandards for internal auditing.\n 3. "Covered authority". Any public authority or public benefit\ncorporation, other than a bi-state authority or public benefit\ncorporation, a majority of whose members are appointed by the governor\nor serve as members by virtue of holding state offices to which they\nwere appointed by the governor, or any combination thereof.\n