Key Compliance Attributes of Internal Audit

Key Compliance Attributes of Internal Audit

The aggregation of departmental results is reported publicly on GC Infobase as an indicator for the Internal Audit Function in the Government of Canada, as required under the Policy on Results.

A.2.2.3 Departments must meet public reporting requirements as prescribed by the Comptroller General of Canada

These results, or key attributes, demonstrate that the main fundamental elements necessary for oversight are in place, are performing as required under the Policy on Internal Audit and the Directive on Internal Audit and are achieving results.

Why Publish Key Compliance Attributes of Internal Audit?

How the results were compiled:

Attributes

1. Training

  1. % of staff with an internal audit or accounting designation (Certified Internal Auditor (CIA), Chartered Professional Accountant (CPA): 38%
  2. % of staff with an internal audit or accounting designation (CIA, CPA) in progress: 31%
  3. % of staff holding other designations (CGAP, CISA, etc.): 23%

Notes: Audit and Evaluation at VAC is a matrix organization---staff are trained in both functions and are expected to work on audits or evaluations as required. As of 8 August 2024, four of the thirteen employees were enrolled in the CIA designation program. Two employees hold more than one designation.

2. Conformance with Institute of Internal Auditors (IIA) Standards

  1. Date of last comprehensive briefing to the Departmental Audit Committee on the internal processes, tools, and information considered necessary to evaluate conformance with the IIA Code of Ethics and the Standards and the results of the quality assurance and improvement program (QAIP): 17 June 2024
  2. Date of last external assessment: 31 March 2022

Note: Comprehensive briefings are provided quarterly to the Departmental Audit Committee.

3. Internal Audits Planned

No Engagement Title Engagement Status Report Approved Date Report Published Date Original Planned MRAP Completion Date Implementation Status
1 Audit of Health Care Benefits - Cannabis for Medical Purposes Open 5 May 2022 8 September 2022 6 June 2028 34% implemented
2 Audit of Information Management Open 18 January 2023 16 February 2023 31 December 2023 74% implemented
3 Audit of Income Replacement Benefit Open 24 November 2023 5 January 2024 31 March 2028 38% implemented
4 Audit of IT Agility Open 19 April 2024 18 July 2024 31 March 2025 0% implemented
5 Audit of Digital Transformation Open 19 April 2024 18 July 2024 30 September 2025 0% implemented
6 Audit of Systems Access (Formerly Systems, Business Controls and Compliance) In-progress N/A N/A N/A N/A
7 Audit of Mental Health Benefit In-progress N/A N/A N/A N/A
8 Audit of Procurement In-progress N/A N/A N/A N/A
9 Audit of Disability Benefits, Survivors Closed 8 December 2021 12 January 2022 30 September 2022 100% implemented
10 Audit of Cyber Security New - Planned 2023-24 In progress N/A N/A N/A

Notes

Additions and adjustments to the internal audits listed in the Departmental Plan may occur in order to address emerging risks and priorities of VAC.

4. Overall Usefulness

Average overall usefulness rating from senior management in 2023 of areas audited: Identified relevant and timely findings which were both useful and realistic resulted in 50.0% of respondents indicating an 'Excellent' rating, while the remaining 50.0% of respondents indicating a 'Good' rating, with one N/A response.

In addition, there was a question on the Client Satisfaction Survey that asked the OPI to give their opinion on the professionalism of the internal auditors at VAC's Audit and Evaluation Division. 100% of the survey respondents indicated the auditors displayed 'excellent' professionalism while conducting the engagement.