Iowa State Auditor Rob Sand's findings come as part of a statewide audit of internal control over financial reporting.