MO04 IT Audit

Independent audits carried out at regular intervals to increase confidence levels and benefit from best practice advice.

Planning: establish a plan to ensure that regular and independent audits are obtained.
Reporting: provide a report, in an appropriate form, to intended recipients upon the completion of audit work.
Follow Up Activities: Recommendations contained within the audit report should be considered by management and enacted wherever feasible.

Increased level of confidence derived from independent audit activities
Increased adoption of best practices as a result of independent audit advice and recommendations
Increased value for the money
Increased level of communication with the audit committee and senior management

Improve EBC procurement and contract management capability including..
- review of Internal Audit recommendations and new procurement directives,
- plan development and approval,
- staff training and implementation of new procurement and contract management processes in EBC, including procurement processes, consistency and control processes for DOA and contract forms, and implementation/tracking of contract management commitments with contract management tool

Increased level of satisfaction with the audit function working relationship
Number of corrective and sustainable actions taken as a result of new audit findings
Increased number of auditors with professional and technical certifications
Improved cycle time of the audit process, from planning through reporting

An audit committee that defines and supports an audit mandate that provides for the independence, responsibility, authority and accountability of the audit function
Risk-based planning is used to identify business and IT activities for initial and cyclical reviews
The planning and conducting of audits are proactive
The audit methodology is properly supported by tools and techniques
Clearly-agreed on practices between management and audit are established for tracking and closing audit recommendations and for reporting on global status
Auditors perform impact assessments of recommendations, including cost, benefit and risk
Audits are performed in accordance with generally accepted auditing standards