Home : Reports and Publications : Audit & Evaluation : Risk-Based Review of WD’s Project M&P; Function - Nov 2003
Risks
Risk Rating: |
Critical |
||
Risk Assessment |
|
||
---|---|---|---|
Controls | Ref. | Description | |
12. | Terms and conditions now include planned project outcomes and measures | ||
Deficiencies | Description | Rec. | |
WD has not formally assigned project evaluation and outcome tracking activities to any organizational unit |
B | ||
Results-Based Management and Accountability Frameworks only approved for two programs |
E | ||
Project Development Officers and M&P Officers not formally trained on new Results-Based Management and Accountability Frameworks |
G | ||
WD does not have a system to track and aggregate performance-related information |
B |
Risk
Risk Rating: |
Mod. |
||
Risk Assessment |
|
||
---|---|---|---|
Controls | Ref. | Description | |
6. | Terms and conditions outline project objectives and eligible expenses | ||
Deficiencies | Description | Rec. | |
WD does not formally track client satisfaction or complaints |
I | ||
M&P lacks operating standards and measures by which it can monitor its efficiency |
I | ||
M&P lacks any current and specific policies and procedures to govern its activities and processes in accordance with regulations and WD interpretations | E |
Risk
Risk Rating: |
High |
||
Risk Assessment |
|
||
---|---|---|---|
Controls | Ref. | Description | |
No department-wide, formal and current controls exist | |||
Deficiencies | Description | Rec. | |
There is no central coordination of the M&P function |
H | ||
M&P follows different procedures and policies (e.g. audit policy, thresholds for supporting claims documentation) between regions |
E | ||
M&P lacks any current and specific policies and procedures to govern its activities and processes in accordance with regulations and WD interpretations |
E | ||
There is no training of M&P staff on regulations and WD interpretations, including on-going training on changes |
G | ||
There is no quality assurance review process or internal audit of the M&P function |
J |
Risk
Risk Rating: |
Mod. |
||
Risk Assessment |
|
||
---|---|---|---|
Controls | Ref. | Description | |
No department-wide, formal and current controls exist | |||
Deficiencies | Description | Rec. | |
No systemic deficiency noted |
Risk
Risk Rating: |
High |
||
Risk Assessment |
|
||
---|---|---|---|
Controls | Ref. | Description | |
No department-wide, formal and current controls exist | |||
Deficiencies | Description | Rec. | |
There is no central coordination of the M&P function |
H | ||
There is no training of M&P staff on regulations and WD interpretations, including training on the new RBAF's and RMAF's |
C | ||
Results-Based Management and Accountability Frameworks and Risk-Based Audit Frameworks are not incorporated into M&P policies and procedure (e.g. project audit practices not defined, project evaluation responsibility not assigned) | C |
Risk
Risk Rating: |
High |
||
Risk Assessment |
|
||
---|---|---|---|
Controls | Ref. | Description | |
No department-wide, formal and current controls exist | |||
Deficiencies | Description | Rec. | |
There is no central coordination of the M&P function |
H | ||
There is no quality assurance review process or internal audit of the M&P function | J |
Risk
Risk Rating: |
Critical |
||
Risk Assessment |
|
||
---|---|---|---|
Controls | Ref. | Description | |
7. | M&P Manager, or another manager with appropriate authority, reviews all claims and applies Financial Administration Act Section 34 authorization indicating payment has been reviewed in accordance with the FAA. This review typically includes a review of supporting documentation on file | ||
Deficiencies | Description | Rec. | |
There is no central coordination of the M&P function | H | ||
M&P follows different procedures and policies (e.g. audit policy, thresholds for supporting claims documentation) between regions |
E | ||
M&P lacks any current and specific policies and procedures to govern its activities and processes in accordance with regulations and WD interpretations |
E | ||
There is no training of M&P staff on regulations and WD interpretations, including on-going training on changes |
G | ||
There is no quality assurance review process or internal audit of the M&P function |
J |
Risk
Risk Rating: |
Critical |
||
Risk Assessment |
|
||
---|---|---|---|
Controls | Ref. | Description | |
11. | WD requires audited financial statements and a statement of compliance from external auditors | ||
25. | Service delivery partners must submit annual operating plans and quarterly performance reports against operating objectives | ||
Deficiencies | Description | Rec. | |
WD may be relying inappropriately on external auditors' compliance reports for Service delivery partners |
K | ||
Performance reports from service delivery partners are not always useful and WD does not verify their accuracy |
K |
Risk
Risk Rating: |
Mod. |
||
Risk Assessment |
|
||
---|---|---|---|
Controls | Ref. | Description | |
13. | The respective accountabilities and responsibilities of the province and WD are outlined in the WEPA agreements for each individual project | ||
Deficiencies | Description | Rec. | |
Insufficient number of WEPA's reviewed to identify control deficiencies |