I would like to clarify. If there's an audit and something major is found, you should take crap for it, honestly. What I meant to say is that audits are instruments that allow us to find weaknesses, and we should respect that and take the measures to deal with it.
The department has a plan. We know of the plan, obviously. It was published. Some actions have already been taken. Now we need to monitor to make sure that these actions will actually work.
There's also a plan being developed internally at TBS to make sure we have a good handle as to whether there is a larger problem here that we need to deal with. Although the rules have not been pointed to in the audit as a problem, is there something that we owe it to ourselves to take a look at? Is there guidance we need to implement, to do more of? Is there training we need to do differently to make sure our people who have these authorities...? As I said, when you sign off on something, it comes with an accountability, sadly.
Our job is to make sure that people have the tools and instruments to discharge those accountabilities. We have to make sure to look at our own processes and also make sure we're providing tools to the people discharging their accountabilities.