The audit office recommended the university increase its oversight of spending and provide recurring training to cardholders.