Previous columns

Implementing key internal controls to eliminate undesirable audit outcomes

Auditor-General of South Africa (AGSA) facilitates a process of in-year reviews of key controls by management and oversight structures

When you read this, my second in a series of candid opinion pieces on public sector governance and clean administration, many elected public representatives will still be settling into their new roles as local government councillors, mayors or senior administrators of their respective municipalities. And I would like to believe that clean administration will be the top item in all their in-trays as they acquaint themselves with their new offices and demanding roles, which are under close scrutiny by the communities that elected them.

As I join millions of fellow South Africans in welcoming our new local government leadership, my office commits to continue working closely with them towards sustainably clean administration and visible service delivery. I also trust they will find these monthly articles useful and make them part of their toolbox as they roll up their sleeves to facilitate good governance.

In the previous article I briefly mentioned the importance of leadership in relation to the design, implementation and maintenance of effective internal control systems within government departments, municipalities and entities. The AGSA has developed a tracking process (which incorporates the more commonly known “key control dashboard”) to assist management and oversight structures to closely monitor the effectiveness of their internal controls. These controls, which comprise leadership involvement, financial and performance management and governance, are the key drivers of improved audit outcomes. Senior members of my team are working throughout the financial year in partnership with auditees to assess, on a quarterly basis, whether auditees are aware of and addressing any deficiencies in these key controls.

There have been enquiries as to whether our assessment of internal controls constitutes an audit. I must emphasise that our assessment of internal controls does not constitute an audit; the process is part of an early warning system to guide leadership towards enhanced audit outcomes. The process is limited to obtaining an understanding of internal controls in place over financial and performance reporting and compliance with laws and regulations as at the assessment date. We do not test or evaluate the operational effectiveness of internal controls. The assessment is purely meant to gauge the strength of key controls, point out any deficiencies and address lapses before the commencement of the annual audit cycles. We do provide management with a formal record that outlines any areas identified during the visit as requiring attention, and prompt them for firm dates by which such matters will have been addressed.

Among other important matters, we assess the following during the quarterly key control visits.

The role of leadership in driving improved audit outcomes
When we interact with our auditees as part of this assessment, we discuss, among other important aspects, the role of leadership in driving improved audit outcomes.

In terms of our key controls checklist, we look at whether the auditee's leadership focuses on establishing and maintaining a culture of honesty, ethical business practices and good governance to protect and enhance the interests of the entity. This would be evidenced by the adoption and active monitoring of formal codes of ethics and conduct. The code of ethics would clearly communicate ethical values to all staff members, while the code of conduct would ensure that service delivery and financial prudence were understood by all to be prerequisites that were embedded in the entity's values.

The leadership and executive management are also responsible for constant monitoring of action plans aimed at enhancing financial and performance reporting and compliance with laws and regulations.

Leadership should also confirm that effective human resource management policies and practices are in place and that adequate and sufficiently skilled resources are available. Moreover, information technology (IT) tools that enable government to deliver value and improve performance should be in place and managed in accordance with good IT governance parameters.

Financial and performance management
Our key control visits review the auditee's controls over daily and monthly processing and reconciling of transactions. For an entity to have sound financial controls, the appropriate level of management should regularly review interim/monthly reporting and prepare regular, accurate and complete financial and performance reports that are supported by reliable sources of information. Leadership and management must also regularly review and monitor compliance by officials with applicable laws and regulations. The focus should be on measures that prevent unauthorised and irregular transactions and enable the discharge of statutory responsibilities by management and senior officials. In this regard, a compliance checklist is recommended as a handy tool to proactively prevent deviations from laws and regulations.

Final thrust towards clean administration
While there is still much to be done to have all these key controls in place at all auditees, it is encouraging to note that government leadership in most entities has introduced and started implementing key controls – this points to the sober realisation that to have clean administration, basic internal controls need to be in place. As I always emphasise: instilling a culture of clean administration in government and thus sustaining clean audits is not difficult – it simply needs leadership commitment to implementing and monitoring the basic internal controls. This will create an environment where deficiencies in financial management, service delivery and compliance are prevented and detected in a timely manner. A clean audit therefore does not mean that all is perfect in government; it simply means that the control environment is sound enough to prevent and detect the imperfections early enough, and that there is conclusive evidence to this effect.

Our recently released general reports on municipalities, provincial and national departments indicate that the auditees with positive audit outcomes are those that have paid attention to these key controls.

Click here to download PDF version

Related

Share

Post a Comment