I just wanted to make a suggestion.
The public accounts committee that the Auditor General reports to when he does his audits requests that the department provide an action plan in writing on a six-month or annual basis. It would be within your jurisdiction, and it's almost your job, to take the recommendations of the audit and to ask the department to provide you with a written update on a periodic basis so you find out whether or not the recommendations have been implemented.