Every year, we do a risk assessment of the operations of the department. With the resources we have, we determine a certain number of engagements to take on.
Internal auditing is a fairly policy-based function, and there are certain rules we need to apply. We have an independent departmental audit committee that supports operations and gives advice and guidance to the deputy heads. That committee is composed of four external members outside of the public service.
We present the report to the departmental audit committee. They review it, they ask a lot of questions and, if they agree, they recommend it for approval by the deputy minister. Ultimately, the approval is obtained by the deputy minister, and then we can go ahead with the work we have planned.