Thank you.
The challenges to be ready for a controls-based audit are essentially the same challenges as are embedded in the policies on internal control and the policies on financial management. That is why in the policy on internal control there is a requirement for the disclosure. It requires us to have documentation of controls and evidence of controls. It requires us to make sure that we are consistent and frequent in our reconciliation, so accountancy provisions have to be in place. We have to make sure that we have controls over the computer systems and security and access, that we can do spot-check audits, that we can do post-payment verification, that we have a constant monitoring system in place.
Those are all elements of systems controls or controls that we have to put in place on financial reporting as part of the policy. This is why there is nothing to fear--if I may refer to the previous question--of having an audit done of financial statements, or of a controls-based audit. All we are suggesting is that the measures that we have put in place enable us to achieve a state of readiness in order to be able to undertake or withstand a controls-based audit in whole or in part, should the Comptroller General require that to happen. So all the elements are being put in place for us to do so.
The policies we have put in place were shared informally, and Mr.Wiersema...[Inaudible--Editor]...to say that, but we never require the Auditor General to formally comment on the policies of the Government of Canada because that is not their role and function. They can be aware of and they can be engaged in the discussion and informally receive, but they do not formally comment on the policies that we set out, because those are the policies that the government chooses to put forward.
In that case, we are quite confident about the policies we have put forward and the requirements, which members of Parliament will see from the first disclosures coming out tomorrow, the extent and the depth to which the analysis is done, as well as, again, pointing to the requirements of an action plan of what each organization has committed and is committed to do, in order to get the controls at a level that is required.