Key Compliance Attributes of Internal Audit

Key Compliance Attributes of Internal Audit

The aggregation of departmental results is reported publicly on GC Infobase as an indicator for the Internal Audit Function in the Government of Canada, as required under the Policy on Results.

A.2.2.3 Departments must meet public reporting requirements as prescribed by the Comptroller General of Canada

These results, or key attributes, demonstrate that the main fundamental elements necessary for oversight are in place, are performing as required under the Policy on Internal Audit and the Directive on Internal Audit and are achieving results.

Why Publish Key Compliance Attributes of Internal Audit?

How the results were compiled:

Attributes

1. Training

  1. % of staff with an internal audit or accounting designation (Certified Internal Auditor (CIA), Chartered Professional Accountant (CPA)): 50%
  2. % of staff with an internal audit or accounting designation (CIA, CPA) in progress: 25%
  3. % of staff holding other designations (CGAP, CISA, etc.): 25%

Notes: As of 21 August 2025, three of the twelve employees were enrolled in the CIA designation program. Two employees hold more than one designation.

2. Conformance with Institute of Internal Auditors (IIA) Standards

  1. a. Date of last comprehensive briefing to the Departmental Audit Committee on the internal processes, tools, and information considered necessary to evaluate conformance with the IIA Code of Ethics and the Standards and the results of the quality assurance and improvement program (QAIP): 3 October 2025
  2. Date of last external assessment: 31 March 2022

Note: Comprehensive briefings are provided quarterly to the Departmental Audit Committee.

3. Internal Audits Planned

No Engagement Title Engagement Status Report Approved Date Report Published Date Original Planned MRAP Completion Date Implementation Status
1 Audit of Health Care Benefits - Cannabis for Medical Purposes Open 5 May 2022 8 September 2022 6 June 2028 23% implemented
2 Audit of Information Management Open 18 January 2023 16 February 2023 31 December 2023 85% implemented
3 Audit of Income Replacement Benefit Open 24 November 2023 5 January 2024 31 March 2028 82% implemented
4 Audit of IT Agility Open 19 April 2024 18 July 2024 31 March 2025 62% implemented
5 Audit of Digital Transformation Open 19 April 2024 18 July 2024 30 September 2025 30% implemented
6 Audit of Systems Access (Formerly Systems, Business Controls and Compliance) Open 14 May 2025 12 August 2025 30 June 2025 16% implemented
7 Audit of Mental Health Benefit Completed 22 August 2024 N/A N/A N/A
8 Audit of Procurement Completed 24 January 2025 N/A N/A N/A
9 Audit of Cyber Security In progress In progress N/A N/A N/A
10 Audit of Data Management and Reporting New - Planned 2025-26 N/A N/A N/A N/A
11 Audit of Data Forecasting and Budgeting New - Planned 2025-26 N/A N/A N/A N/A

Notes

Additions and adjustments to the internal audits listed in the Departmental Plan may occur in order to address emerging risks and priorities of VAC. The implementation status is as of June 24, 2025.

4. Overall Usefulness

Average overall usefulness rating from senior management in 2024 of areas audited: Identified relevant and timely findings which were both useful and realistic resulted in 67% of respondents indicating an 'Excellent' rating, while the remaining 33% of respondents indicating a 'Good' rating.

In addition, there was a question on the Client Satisfaction Survey that asked the OPI to give their opinion on the professionalism of the internal auditors at VAC's Audit and Evaluation Division. 100% of the survey respondents indicated the auditors displayed 'excellent' professionalism while conducting the engagement.