Issue - meetings

To note the reports from Internal Auditor RSM Risk Assurance Services

·        Progress Report

·        Risk Maturity Report

Lead: Alex Hire

7.1             Mr Barker presented the Progress Report.  He informed the Committee that the Health and Safety audit is being replaced by the Project and Programme Management audit which is in the process of being scoped. The GDPR audit is going through the quality assurance processes.  Mr Barker indicated that RSM are comfortable that these projects will be delivered by the end of the year.

7.2          Mr Barker presented the key highlights from the Risk Maturity Report, and advisory review.  Three low management actions and one medium management action was advised, and Mr Barker presented these to Members.

7.3          Mr Brady queried ownership of the Risk Maturity Report prior to the implementation date of March 2023. 

Ms Della-Cerra-Smith explained that the first stage will be to look at the three lines of the defence and then implementation will take place in October 2023, TfN are considering solutions suitable for the size and nature of the organisation.

7.4          The Chair highlighted that maturity models are all different and the importance of finding the appropriate solution for the size of the organisation. Having a clear assurance view helps to identify topics for deep dives. The three lines model was updated by the Institute of Internal Auditors in 2020 and the Chair recommended that reference is made to the new model.

Resolved:

That the Committee note the Internal Audit Report