Key Compliance Attributes of Internal Audit
Key Compliance Attributes are published as required by the Treasury Board Directive on Internal Audit.
These results, or key compliance attributes, demonstrate that the fundamental elements necessary for oversight are in place in the organization, are performing as required under the Policy on Internal Audit and the Directive on Internal Audit, and are achieving results.
| Performance indicators | Key compliance attribute | Results | Internal audit comments (as necessary) |
|---|---|---|---|
| Do internal auditors in departments have the training required to do the job effectively? Are multidisciplinary teams in place to address diverse risks? | Percentage of staff with an internal audit or accounting designation (Certified Internal Auditor , Chartered Professional Accountant)* | 100% | There are 2 staff members, including the Chief Audit and Evaluation Executive, dedicated to the internal audit function of the Audit and Evaluation division. Both staff members have multiple designations. |
| Percentage of staff with an internal audit or accounting designation (Certified Internal Auditor, Chartered Professional Accountant) in progress | 0% | ||
| Percentage of staff holding other designations | 100% | Other designations held by internal audit staff: Certified Fraud Examiner Certified Financial Crime Specialist Certificate in Risk Management Assurance Certified Information Systems Auditor | |
| Is internal audit work performed in conformance with the international standards for the profession of internal audit as required by Treasury Board policy? | Date of last comprehensive briefing to the Departmental Audit Committee on the internal processes, tools, and information considered necessary to evaluate conformance with the IIA Code of Ethics and the Standards and the results of the quality assurance and improvement program | November 2023 | The external practice inspection is currently in a progress with the final report expected to be delivered at the end of September 2024. |
| Date of last external assessment | May 2019 | The next external assessment is currently underway. | |
| Are the Risk-Based Audit Plans (RBAP) submitted to audit committees and approved by deputy heads implemented as planned with resulting reports published? Is management acting on audit recommendations for improvements to departmental processes? | Risk-Based Audit Plans and related information:
| See table below | |
| Is internal audit credible and adding value in support of the mandate and strategic objectives of the organization? | Average overall usefulness rating from senior management (Assistant Deputy Minister-level or equivalent) of areas audited. | N/A | Due to the small size of the internal audit team and the Canadian Grain Commission’s Assistant Deputy Minister-level equivalent positions, posting of result would limit confidentiality of satisfaction surveys. Ongoing dialogue with senior management occurs to ensure internal audit engagements are relevant and useful. |
- Treasury Board of Canada Secretariat: Why publish key compliance attributes of internal audit?
| Internal audit title | Audit status | Report approved date | Report published date | Original planned Management Action Plan completion date | Management Action Plan implementation status |
|---|---|---|---|---|---|
| Audit of cybersecurity practices | Approved – Not published | March 1, 2022 | Details will not be released due to security considerations | - | - |
| Audit of entity-level controls | Published – Management Action Plan not fully implemented | November 9, 2021 | February 9, 2022 | March 31, 2023* | 88% (1 out of 8 remains outstanding) |
| Information technology general controls review – Internal audit | Approved – Not published | November 30, 2021 | - | April 15, 2023* | 88% (1 out of 8 remains outstanding) |
| Review of Grain Research Laboratory project selection – Internal audit | Approved – Not published | November 3, 2022 | Not published due to the review status | March 31, 2023* | 100% |
| Audit of external and internal communication practices | Approved - Published | November 16, 2023 | February 21, 2024 | May 31, 2025* | 0% |
| Project health check review advisory – Internal audit | Approved – Not published | November 16, 2023 | Not published due to the advisory status | No Management Action Plan deadlines due to advisory nature | 0% |
| Service fees calculation methodology review – Internal audit | In progress | - | - | - | - |
| Licensing risk model review advisory – Internal audit | Approved – Not published | January 29, 2024 | - | No Management Action Plan deadlines due to advisory nature | 0% |
| Evaluation of the Informal Conflict Management System | Approved – Published | February 14, 2023 | May 3, 2023 | April 1, 2024* | 45% |
| Grain Inspection Development Program - Evaluation | Approved – Not published | April 12, 2024 | In progress | December 31, 2026* | - |
| Safeguards for farmers - Evaluation In progress | In progress | - | - | - | - |
| Canadian Grain Commission performance indicators advisory - Evaluation | Planned | - | - | - | - |
*Where multiple MAPs exist, the latest date is displayed.