This report updates the ANAO's assessment of audit findings relating to major entity internal control structures, including governance arrangements, information systems and control procedures through to March 2004. The findings summarised in this report arise from the interim phase of the financial statement audits of major Australian Government entities for 2003/2004. Examinations of such findings are designed to assess the reliance that can be placed on control structures to produce complete, accurate and valid information for financial reporting purposes.

The audit objectives were to assess: the appropriateness of agencies' policies for dealing with requests for information in accordance with the FOI Act; and assess agencies' compliance with the provisions of the FOI Act, in relation to selected requests for information.

The objective of this audit was to assess the extent to which PV applications in Australia are processed in accordance with relevant laws and policies, and whether DIMIA employs appropoiate mechanisms to ensure compliance with those laws and policies.

The objective of the audit was to assess whether protective security functions in selected organisations were being effectively managed. In considering effectiveness, the audit assessed whether protective security arrangements: - were designed within the context of the business framework and the related security risks identified by the organisation; and - provided an appropriate level of support for the organisation's operations and the delivery of its services.

The objective of the audit was to assess the effectiveness of DIMIA's management of its detention agreements with ACM to operate Australia's mainland immigration detention centres. In particular, the ANAO examined: DIMIA's strategic approach to the management and coordination of the contract; how DIMIA defined the services to be delivered by ACM; the systems in place to monitor and report against contract performance; the effectiveness of controls over contract payment arrangements; and DIMIA's management of infrastructure through the detention agreements.

The overall objective of the audit was to assess CrimTrac's progress in achieving the key deliverables it was established to provide, given that the agency had been in operation for some three years. The Australian Government provided $50 million for the implementation of CrimTrac, with an expectation that significant progress would be made within the first three years. The audit further examined whether CrimTrac had progressed the key deliverables efficiently and effectively, and whether the data either held by CrimTrac, or accessed through CrimTrac, for matching purposes is secure.

The objective of this audit was to follow up DVA's implementation of the recommendations in Audit Report No. 44, 2000-01, Information Technology in the Department of Veterans' Affairs. The ANAO made two recommendations in the report (the second having five parts). The recommendations addressed the monitoring of IT changes; IT performance information; information systems model documentation; and the facilitation of the interpretation of performance information.

The objectives of this performance audit were to: - review the governance and accountability framework for the Scheme, and - assess the efficiency and effectiveness of Treasury's implementation and management of that framework.

The objectives of the audit were to assess whether DOTARS had developed and implemented an appropriate framework and procedures to administer lessee obligations entered into as part of the 1997 and 1998 leasehold sales of 17 Federal airports. In particular, the audit sought to: - review DOTARS' monitoring of lessee compliance with the Airport Leases and supporting sale documentation; - examine the effectiveness of the framework and procedures developed by DOTARS to administer lessee development commitments; and assess the impact of changes in the aviation environment on the management and monitoring of lessee obligations.

The audit objective was to provide independent assurance to the Parliament on the effectiveness of Australian Public Service organisations in the use and management of the HRIS to satisfy mandatory reporting requirements, as well as provide meaningful information to management. The audit also considered the use of employee self service facilities offered by the HRIS, which has the capacity to provide staff with access to their personal information, reduce manual processing and streamline processing.