Thank you, Chair.
Thank you, all, for your attendance today.
As a first thought, I was struck exactly the same as Mr. Lefebvre. Folks need to give their head a bit of a shake and think about it. When you're going into an audit, do you walk in and the first thing you say is that you're going to say how great you are before we go on? I leave that with you.
Having said that, it's not a bad audit. As you know, I'm not exactly a soft touch on these things. I pulled the previous audit that was tabled on December 4, 2008. Colleagues who have been with me for some time know this is where I launch into the bloody stratosphere where we've found in previous audits there are problems and there are recommendations and promises to fix them and we go back in 10 years later and it's the same problem, same promises, and somehow they expect things are going to be okay. I didn't find that here, and I have to tell you, it's been a long time. It was refreshing.
Staying in a positive vein, the remarks in that audit were exactly what we want to hear. On page 2 of that report the then auditor said, “We found no significant deficiencies in the systems and practices we examined. We found sound systems and practices in a number of areas we examined.” For example, they noted some areas for improvement.
The key thing that struck me, colleagues, was—and I looked at this carefully—none of the issues that were raised in the 2008 audit are repeated in this audit. Colleagues, I try to be fair-minded. When things are offside, boy, I'm going to come down like a ton of bricks. But when you're doing a fairly good job and meeting the standards, and doing it consistently over a period of time.... This now speaks to about a decade and a half that's been looked at carefully and each time it's come up not perfect—but I haven't seen a perfect audit yet—but not bad, pretty good, even.
Often I'll say, “having said that” and then I'll launch into something. I don't have that here. A couple of things struck me, though, and it's not just your entity; it's others too. In this day and age where fraud and risk and security are so important, they loom large. Of all the areas where you could have had some weaknesses, do you have any sense of why, in that area? Normally that's where we gravitate. I will note—and then I'll give you a chance to respond—that you had already started to act on those things before the auditor came in, and that's good. But I just leave it with you that of all the things where I thought there might be some softness, I'm always surprised when....
Data we know is an ongoing issue and we're trying to stand on that. My friend Mr. Lefebvre talked about that and your accountability on it, but it throws me that of all the areas where there was a little deficiency, it was like risk. Just help me understand a little how that might have been.