Agenda item
Latest Internal Audit Report
- Meeting of Senedd Commission Audit and Risk Assurance Committee, Monday, 20 March 2017 10.15 (Item 4.)
- View the background to item 4.
Minutes:
ACARAC
(02-17) Paper 4 – Data Analytics (Payroll) review
ACARAC
(02-17) Paper 5 – Project Management
4.1
Gareth
presented two audit reports, both of which were welcomed by the Committee.
4.2
The
Data Analytics review demonstrated the integrity and robustness of the payroll
data and had indicated no evidence of any fraudulent behaviour. The Committee
questioned the validation necessary to prove the integrity of the data within
the HR/Payroll system. Gareth assured the Committee that data was thoroughly
checked and exception reporting took place where necessary. He then described
some of the reporting functions of the new finance system which included
contract spend analytics.
4.3
Gareth
introduced his second report on the review of the Commission’s approach to
project management where four recommendations had been identified and agreed by
management.
4.4
Given
the challenges that lay ahead for the Commission to deliver an ambitious set of
objectives, the Committee encouraged officials to develop clear criteria for
prioritising projects, and to focus on benefits realisation.
4.5
The
Committee again questioned the lack of project progress reporting within the
Corporate Performance (KPI) Report. Dave agreed to consider including the
Directors’ updates on progress of projects, which were provided quarterly to
IRB, as annexes to future KPI Reports.
4.6
Dave
was pleased to see real progress since Gareth’s previous review in 2015. He
described the process in place at the fortnightly IRB meetings to assess
resource and budget implications of projects, as well as how they contributed
to achieving the Commission’s strategic goals and priorities. He would take on
board the Committee’s suggestion of detailing prioritisation criteria in a more
formal manner.
4.7
The
Committee questioned the scrutiny of business cases and officials recognised
improvements were needed to capture lessons learned and to monitor benefit
realisation. It was agreed that further guidance was needed, including around
the development and iterations of business cases. Gareth also agreed to
circulate a useful report he had recently found on agile project management
methodology to Committee members.
4.8
Officials
welcomed the discussion on programme and project management and the Committee
welcomed a review of change management principles and processes which was
scheduled for September 2017. The current project guidance would be updated and
developed collaboratively by members of the Community of Practice and other key
stakeholders.
Actions
Data Analytics (Payroll) audit
-
Gareth to provide the Committee with
further information regarding the sample sizes used for data analytics.
Project
Management audit
-
Gareth to circulate
outcome of IRB review discussion in advance of the June meeting.
-
Dave to consider
prioritisation criteria for projects.
-
Dave to consider inclusion
of IRB ‘Directors updates’ as annexes to the KPI Report.
-
Gareth to circulate report
on agile project management methodology.