The 2022-2026 PFM Reform Programme outlines goals for developing internal control and audit systems, with the MoF being primarily responsible for its implementation through the Central Harmonisation Unit (CHU), across the public sector. By the end of 2024, just over half of the planned activities related to internal control and managerial accountability were executed. The reform programme is largely governed by the 2018 LMIC supplemented by various rulebooks and methodologies. A planned amendment to the PIFC Law seeks to address inconsistencies with other laws and update associated by-laws.
The PIFC Law mandates public bodies to establish internal controls, with heads of public bodies holding overall responsibility. Compliance rates for submitting annual governance and control reports are high (over 90% in 2023), and around two-thirds of entities performed a self-assessment over the same period. The CHU uses these reports and self-assessments to make recommendations for updating risk registers and conducting further self-assessments. Despite these efforts, just over one third of entities adopted plans to improve management and controls in 2023.
Risk management practices are improving. However, updates and substantive use of these registers remain uneven. By 2023, most public bodies had risk registers, although only about one third updated them regularly, and there is little inter-institutional co-ordination. Monitoring SoEs by line ministries remains a priority, particularly in financial planning and performance monitoring. Most SoEs do not submit financial plans to the MoF or the supervising ministries, and there are no binding requirements for agreeing performance indicators or monitoring frameworks. Consequently, many line ministries lack consistent oversight or coherent data on SoEs.
The PIFC Law also establishes the framework for internal audit in the public sector, detailing requirements for planning, execution, reporting, independence, and auditor certification and development. It provides for the establishment of internal audit units (IAUs) in public sector entities, either internally or through agreements with other entities, and sets minimum staffing requirements for these units. By the end of 2023, there were IAUs in nearly all public bodies, although most units remain understaffed, with only nine out of 23 central government entities meeting the minimum staffing criteria. The Government has approved CHU proposals, including salary top-ups approved in early 2024, to address retention challenges and bolster internal audit capacity.
Implementation of the internal audit function is progressing steadily. The CHU and the Human Resource Management Authority have professional development and certification programmes for internal auditors, with 83 out of 87 (95%) auditors certified by the end of 2023. Efforts to enhance quality assurance are in early stages, with guidelines for self-assessments and reviews in place. An external quality assessment system is under development, overseen by the CHU.
In 2023, 111 out of 139 (80%) planned audits were completed, reflecting a growing trend since 2021. Despite general compliance with legal and methodological requirements, gaps persist in annual audit planning. Internal audit reports produced 552 recommendations in 2023, with an implementation rate of about 60%. Management’s perception of internal audits is improving, but challenges remain on engagement with audit findings. While most managers accept audit recommendations, not all believe these contribute to organisational improvement. Furthermore, internal audit findings are not consistently discussed with auditees, limiting their impact.