Refine search Expand filter

Reports

Published

Actions for Universities 2017

Universities 2017

Universities
Asset valuation
Compliance
Cyber security
Financial reporting
Information technology
Internal controls and governance

The Auditor-General, Margaret Crawford released her report today on the results of financial audits of NSW universities for the year ended 31 December 2017. No qualified audit opinions were issued for any university and the quality and timeliness of financial reporting continues to improve.

This report analyses the results of our audits of financial statements of the ten NSW universities and their controlled entities for the year ended 31 December 2017. The table below summarises our key observations.

This report focuses on our observations on the common issues identified in our audits of the financial statements of the ten NSW universities and their controlled entities in 2017. The universities and controlled entities are listed in Appendix three and four respectively.

The report provides our analysis of universities’ results and findings in the following areas:

  • Financial reporting and performance
  • Teaching and research
  • Financial controls and governance.

Accurate and timely financial reporting is important for universities to make efficient and effective economic decisions. Sound financial performance provides the platform for universities to deliver high quality teaching and research outcomes. 

This chapter outlines our audit observations on the financial reporting and performance of NSW universities for 2017.

Observation Conclusion or recommendation
3.1 Financial reporting
Audit results
The financial statements of all ten NSW universities and 66 out of 69 of their controlled entities received unmodified audit opinions. Two controlled entities did not fully comply with the financial reporting and audit requirements of the Public Finance and Audit Act 1983 as they did not submit their financial statements to the Auditor-General. One of these entities was audited under the requirements applicable in its foreign jurisdiction. A third controlled entity submitted financial statements, but only after the statutory due date.
Quality and timeliness of financial reporting
The number of uncorrected misstatements continues to decrease. The quality of financial statements of the universities improved in 2017.
Two universities simplified disclosures in their financial statements. The financial statements of the University of Sydney and Macquarie University are more concise, readable and understandable than those of other universities. 
Six universities finalised their financial statements earlier than in previous years. Universities that performed aspects of early close procedures improved the timeliness of their financial reporting and helped us conclude our audits earlier. 
Eight universities are yet to quantify the impact of new accounting standards applicable in future years.  The two universities that have assessed the impact of the new accounting standards believe the impact will be material.
An accounting issue was identified relating to the recognition and measurement of payroll tax liabilities on employees' defined benefit superannuation contributions payable to the superannuation funds. Recommendation: NSW universities should clarify the recognition and measurement of their liability for payroll tax on their defined benefit superannuation obligations before 31 December 2018. 
3.2 Financial performance
Sources of revenue from operations
Government grants as a proportion of total revenue decreased over the past five years by 6.4 per cent.

The Australian Government announced funding freezes to Australian Government grants revenue for the next two years.

Universities are expanding other revenue streams to decrease their reliance on grant funding. The revenue stream that has increased the most significantly over the past five years is overseas student revenue.

Revenue from overseas student course fees increased by 23 per cent in the last year and contributed $2.8 billion to the NSW university sector in 2017. Overseas student revenue exceeded domestic student revenue by 37 per cent, and comprised over a quarter of NSW universities' total revenues in 2017. The growth in overseas student revenue has not been shared equally in the sector. Some universities are more dependent on overseas student revenue than others.
Revenue from overseas students from four countries comprised 37 per cent of total student revenues for all NSW universities.  Recommendation: NSW universities should assess their student market concentration risk where they rely heavily on students from a single country of origin. This increases their sensitivity to economic or political changes in that country.
Universities' data shows as much as 71 per cent of their overseas student revenue comes from a single country of origin. 
Research income of NSW universities was $1.1 billion in 2016 and has grown by 9.8 per cent between 2012 and 2016. Two universities attracted 65.2 per cent of the total research income received by all NSW universities.
Other revenues
Total philanthropic revenue increased by 1.0 per cent to $151 million in 2017.

Philanthropic revenue has been increasing for the past five years.

Two universities attracted 76.8 per cent of the total philanthropic dollars received by all NSW universities.

Average investment returns fell from 7.0 per cent in 2013 to 5.8 per cent in 2017, while total investments grew to $5.4 billion in 2017 from $3.5 billion in 2013.

Universities have structured their investment portfolios between fixed and non-fixed income assets, seeking to optimise their returns in a low interest rate environment within the limits of their risk management strategies.

Investment income is a significant source of revenue for some, but not all universities. Two universities' investment funds represented 52.3 per cent of the total investment funds of all NSW universities combined.

Low interest rates have made investment in fixed income assets less attractive for universities. Over the last five years universities have increased their investment in non-fixed income (or market based) assets by 67.1 per cent.  
Most NSW universities have established investment governance frameworks.  
Financial sustainability indicators
Operating expenditure per equivalent full-time student load (EFTSL) increased by 3.0 per cent in 2017. The universities that have been able to attract international students to grow their operational revenues have been able to leverage economies of scale to maximise their average margin per EFTSL. Other universities have had to rely on containing costs to achieve higher EFTSL margins.
For six universities, the growth in operating expenditure has exceeded the growth in operating revenue, reducing operating margins. The risk associated with narrowing margins is compounded where universities have a high reliance on student revenues from a single source. Sudden changes in demand can challenge the ability of those universities to adjust their cost structures.

As the margin between operating revenue and operating expenditure decreases, operational results are more at risk from unexpected fluctuations, such as Australian Government higher education reforms and reduced overseas student enrolments.

Smaller operating margins reduce the funds available to invest in upgrading infrastructure and implement corporate strategies to meet future challenges.

Eight universities have current ratios greater than one in 2017.    
Controlled entities
Sixteen of the universities' 58 controlled entities that operate business activities reported losses in 2017 (15 in 2016). Overall, the financial performance of controlled entities operating business activities was positive, but results in 2017 were lower than in 2016. 
The total profit of controlled entities operating business activities decreased 5.5 per cent to $77.5 million in 2017 ($82.6 million in 2016). Universities may be able to improve their overall performance by reassessing the viability of business ventures that continue to make losses and/or rely on them for financial support. 
Eighteen controlled entities relied on guarantees of financial support from their parent entity in 2017 (19 in 2016).  

Teaching and research are key objectives of universities and they invest most of their resources in achieving high quality academic and research outcomes to maintain or advance their reputations and rankings in Australia and abroad. Universities have also committed to achieving certain government objectives.

This chapter outlines teaching and research outcomes for NSW universities for 2017.

Observation Conclusion or recommendation
4.1 Teaching outcomes
Achieving Australian Government target
NSW universities met the Australian Government target of having 40 per cent of 25 to 34 year-olds with bachelor degrees ten years earlier than the original target date of 2025.

The proportion of 25 to 34 year-olds in NSW holding a bachelor degree increased to 43.4 per cent in 2017.

In 2009, when the target was originally set, only 35.5 per cent of 25 to 34 year-olds held a bachelor degree.

Graduate employment rates

Seven universities exceeded the national average of 71.8 per cent for the proportion of their undergraduates who obtain full-time employment.

Four universities achieved better than the national average of 86.1 per cent for the proportion of their postgraduates who obtain full-time employment.

Most NSW universities' employment outcomes are better than the national average.
Student enrolments by field of education
NSW universities have increased enrolments in fields of study that align with known skills shortages in NSW identified by the Australian Government for 2016 and 2017. Alignment of student intake with identified shortages helps ensure graduates secure timely employment on completion of their studies. 
Achieving diversity outcomes

NSW universities agreed to targets set by the Australian Government for enrolments of students from low socio economic status (SES) and Aboriginal or Torres Strait Islander backgrounds.

NSW universities can improve outcomes for these students by implementing policies to increase enrolments and support students to graduation.

Three universities exceeded the target of 20 per cent of low SES student enrolments in 2017.

Six universities met their Indigenous student enrolment target in 2017. The target is having a growth rate in the enrolment of Indigenous students that is more than 50 per cent higher than the growth rate of non-Indigenous student enrolments.

At the current rate, it is unlikely most universities will reach the agreed low SES target by 2020.

Appropriate financial controls help ensure efficient and effective use of resources, and the implementation and monitoring of university policies. Governance consists of frameworks, processes and behaviours that enable the universities to operate effectively and comply with relevant laws and policies.

This chapter outlines our audit observations on the financial control and governance of NSW universities for 2017.

Observation Conclusion or recommendation
5.1 Internal controls
Internal control findings

Eighty-three internal control deficiencies were identified during our audits, of which 40 related to Information Technology (IT).
High risk
We identified a high risk finding in relation to storage of unencrypted username and password information on a database without appropriate access restrictions. We performed additional audit procedures to conclude that the control deficiency did not present a risk of material misstatement in the university's financial statements.
Moderate risk
Forty-three moderate risk control deficiencies were identified, of which 22 related to IT and 21 related to governance and financial reporting.

Recommendation: NSW universities should ensure controls, including information technology controls, are properly designed and operate effectively to protect intellectual property, staff and student data, and assets. Universities should rectify identified deficiencies in a timely manner.
Repeat findings
Twenty-four findings were repeat internal control deficiencies, of which 18 related to IT. 
IT issues can take some time to rectify because specialist skill and/or partnering with software suppliers is often required to implement new controls. However, until rectified, the vulnerabilities those control deficiencies present can be significant.
Cyber security
Our audits identified opportunities to improve cyber security controls and processes to reduce risks, including risks relating to financial loss, reputational damage and breaches of privacy laws.

Recommendation: NSW universities should strengthen their cyber security frameworks to manage cyber security risks. This includes developing:

  • procedures, protocols and supporting systems to effectively identify, report and respond to cyber security threats and incidents
     
  • staff awareness training and programs, including programs tailored for a range of audiences.

Use of credit card and work-related travel
All NSW universities had appropriate published policies on the use of credit cards, and have internal controls and processes to implement those policies.

The risks of unauthorised use can be mitigated by regular monitoring, and reporting breaches for investigation and disciplinary action.

Appropriately designed and implemented preventive and detective controls are most effective when enforcement and disciplinary activities are oversighted by university audit and risk committees. 

Published

Actions for Internal Controls and Governance 2017

Internal Controls and Governance 2017

Finance
Education
Community Services
Health
Justice
Whole of Government
Asset valuation
Compliance
Cyber security
Information technology
Internal controls and governance
Project management
Risk

Agencies need to do more to address risks posed by information technology (IT).

Effective internal controls and governance systems help agencies to operate efficiently and effectively and comply with relevant laws, standards and policies. We assessed how well agencies are implementing these systems, and highlighted opportunities for improvement.
 

1. Overall trends

New and repeat findings

The number of reported financial and IT control deficiencies has fallen, but many previously reported findings remain unresolved.

High risk findings

Poor systems implementations contributed to the seven high risk internal control deficiencies that could affect agencies.

Common findings

Poor IT controls are the most commonly reported deficiency across agencies, followed by governance issues relating to cyber security, capital projects, continuous disclosure, shared services, ethics and risk management maturity.

2. Information Technology

IT security

Only two-thirds of agencies are complying with their own policies on IT security. Agencies need to tighten user access and password controls.

Cyber security

Agencies do not have a common view on what constitutes a cyber attack, which limits understanding the extent of the cyber security threat.

Other IT systems

Agencies can improve their disaster recovery plans and the change control processes they use when updating IT systems.

3. Asset Management

Capital investment

Agencies report delays delivering against the significant increase in their budgets for capital projects.

Capital projects

Agencies are underspending their capital budgets and some can improve capital project governance.

Asset disposals

Eleven per cent of agencies were required to sell their real property through Property NSW but didn’t. And eight per cent of agencies can improve their asset disposal processes.

4. Governance

Governance arrangements

Sixty-four per cent of agencies’ disclosure policies support communication of key performance information and prompt public reporting of significant issues.

Shared services

Fifty-nine per cent of agencies use shared services, yet 14 per cent do not have service level agreements in place and 20 per cent can strengthen the performance standards they set.

5. Ethics and Conduct

Ethical framework

Agencies can reinforce their ethical frameworks by updating code‑of‑conduct policies and publishing a Statement of Business Ethics.

Conflicts of interest

All agencies we reviewed have a code of conduct, but they can still improve the way they update and manage their codes to reduce the risk of fraud and unethical behaviour.

6. Risk Management 

Risk management maturity

All agencies have implemented risk management frameworks, but with varying levels of maturity.

Risk management elements

Many agencies can improve risk registers and strengthen their risk culture, particularly in the way that they report risks to their lead agency.

This report covers the findings and recommendations from our 2016–17 financial audits related to the internal controls and governance of the 39 largest agencies (refer to Appendix three) in the NSW public sector. These agencies represent about 95 per cent of total expenditure for all NSW agencies and were considered to be a large enough group to identify common issues and insights.

The findings in this report should not be used to draw conclusions on the effectiveness of individual agency control environments and governance arrangements. Specific financial reporting, controls and service delivery comments are included in the individual 2017 cluster financial audit reports tabled in Parliament from October to December 2017.

This new report offers strategic insight on the public sector as a whole

In previous years, we have commented on internal control and governance issues in the volumes we published on each ‘cluster’ or agency sector, generally between October and December. To add further value, we then commented more broadly about the issues identified for the public sector as a whole at the start of the following year.

This year, we have created this report dedicated to internal controls and governance. This will help Parliament to understand broad issues affecting the public sector, and help agencies to compare their own performance against that of their peers.

Without strong control measures and governance systems, agencies face increased risks in their financial management and service delivery. If they do not, for example, properly authorise payments or manage conflicts of interest, they are at greater risk of fraud. If they do not have strong information technology (IT) systems, sensitive and trusted information may be at risk of unauthorised access and misuse.

These problems can in turn reduce the efficiency of agency operations, increase their costs and reduce the quality of the services they deliver.

Our audits do not review every control or governance measure every year. We select a range of measures, and report on those that present the most significant risks that agencies should mitigate. This report divides these into the following six areas:

  1. Overall trends
  2. Information technology
  3. Asset management
  4. Governance
  5. Ethics and conduct
  6. Risk management.

Internal controls are processes, policies and procedures that help agencies to:

  • operate effectively and efficiently
  • produce reliable financial reports
  • comply with laws and regulations.

This chapter outlines the overall trends for agency controls and governance issues, including the number of findings, level of risk and the most common deficiencies we found across agencies. The rest of this volume then illustrates this year’s controls and governance findings in more detail.

Issues

Recommendations

1.1 New and repeat findings

The number of internal control deficiencies reduced over the past three years, but new higher-risk information technology (IT) control deficiencies were reported in 2016–17.

Deficiencies repeated from previous years still make up a sizeable proportion of all internal control deficiencies.

Recommendation

Agencies should focus on emerging IT risks, but also manage new IT risks, reduce existing IT control deficiencies, and address repeat internal control deficiencies on a more timely basis.

1.2 High risk findings

We found seven high risk internal control deficiencies, which might significantly affect agencies.

Recommendation

Agencies should rectify high risk internal control deficiencies as a priority

1.3 Common findings

The most common internal control deficiencies related to poor or absent IT controls.

We found some common governance deficiencies across multiple agencies.

Recommendation

Agencies should coordinate actions and resources to help rectify common IT control and governance deficiencies.

Information technology (IT) has become increasingly important for government agencies’ financial reporting and to deliver their services efficiently and effectively. Our audits reviewed whether agencies have effective controls in place over their IT systems. We found that IT security remains the source of many control weakness in agencies.

Issues Recommendations

2.1 IT security

User access administration

While 95 per cent of agencies have policies about user access, about two-thirds were compliant with these policies. Agencies can improve how they grant, change and end user access to their systems.

Recommendation

Agencies should strengthen user access administration to prevent inappropriate access to sensitive systems. Agencies should:

  • establish and enforce clear policies and procedures
  • review user access regularly
  • remove user access for terminated staff promptly
  • change user access for transferred staff promptly.

Privileged access

Sixty-eight per cent of agencies do not adequately manage who can access their information systems, and many do not sufficiently monitor or restrict privileged access.

Recommendation

Agencies should tighten privileged user access to protect their information systems and reduce the risks of data misuse and fraud. Agencies should ensure they:

  • only grant privileged access in line with the responsibilities of a position
  • review the level of access regularly
  • limit privileged access to necessary functions and data
  • monitor privileged user account activity on a regular basis.

Password controls

Forty-one per cent of agencies did not meet either their own standards or minimum standards for password controls.

Recommendation

Agencies should review and enforce password controls to strengthen security over sensitive systems. As a minimum, password parameters should include:

  • minimum password lengths and complexity requirements
  • limits on the number of failed log-in attempts
  • password history (such as the number of passwords remembered)
  • maximum and minimum password ages.

2.2 Cyber Security

Cyber security framework

Agencies do not have a common view on what constitutes a cyber attack, which limits understanding the extent of the cyber security threat.

Recommendation

The Department of Finance, Services and Innovation should revisit its existing framework to develop a shared cyber security terminology and strengthen the current reporting requirements for cyber incidents.

Cyber security strategies

While 82 per cent of agencies have dedicated resources to address cyber security, they can strengthen their strategies, expertise and staff awareness.

Recommendations

The Department of Finance, Services and Innovation should:

  • mandate minimum standards and require agencies to regularly assess and report on how well they mitigate cyber security risks against these standards
  • develop a framework that provides for cyber security training.

Agencies should ensure they adequately resource staff dedicated to cyber security.

2.3 Other IT systems

Change control processes

Some agencies need to improve change control processes to avoid unauthorised or inaccurate system changes.

Recommendation

Agencies should consistently perform user acceptance testing before system upgrades and changes. They should also properly approve and document changes to IT systems.

Disaster recovery planning

Agencies can do more to adequately assess critical business systems to enforce effective disaster recovery plans. This includes reviewing and testing their plans on a timely basis.

Recommendation

Agencies should complete business impact analyses to strengthen disaster recovery plans, then regularly test and update their plans.

Agency service delivery relies on developing and renewing infrastructure assets such as schools, hospitals, roads, or public housing. Agencies are currently investing significantly in new assets. Agencies need to manage the scale and volume of current capital projects in order to deliver new infrastructure on time, on budget and realise the intended benefits. We found agencies can improve how they:

  • manage their major capital projects
  • dispose of existing assets.
Issues Recommendations or conclusions

3.1 Capital investment

Capital asset investment ratios

Most agencies report high capital investment ratios, but one-third of agencies’ capital investment ratios are less than one.

Recommendation

Agencies with high capital asset investment ratios should ensure their project management and delivery functions have the capacity to deliver their current and forward work programs.

Volume of capital spending

Most agencies have significant forward spending commitments for capital projects. However, agencies’ actual capital expenditure has been below budget for the last three years.

Conclusion

The significant increase in capital budget underspends warrant investigation, particularly where this has resulted from slower than expected delivery of projects from previous years.

3.2 Capital projects

Major capital projects

Agencies’ major capital projects were underspent by 13 percent against their budgets.

Conclusion

The causes of agency budget underspends warrant investigation to ensure the NSW Government’s infrastructure commitment is delivered on time.

Capital project governance

Agencies do not consistently prepare business cases or use project steering committees to oversee major capital projects.

Conclusion

Agencies that have project management processes that include robust business cases and regular updates to their steering committees (or equivalent) are better able to provide those projects with strategic direction and oversight.

3.3. Asset disposals

Asset disposal procedures

Agencies need to strengthen their asset disposal procedures.

Recommendations

Agencies should have formal processes for disposing of surplus properties.

Agencies should use Property NSW to manage real property sales unless, as in the case for State owned corporations, they have been granted an exemption.

Governance refers to the high-level frameworks, processes and behaviours that help an organisation to achieve its objectives, comply with legal and other requirements, and meet a high standard of probity, accountability and transparency.

This chapter sets out the governance lighthouse model the Audit Office developed to help agencies reach best practice. It then focuses on two key areas: continuous disclosure and shared services arrangements. The following two chapters look at findings related to ethics and risk management.

Issues Recommendations or conclusions

4.1 Governance arrangements

Continuous disclosure

Continuous disclosure promotes improved performance and public trust and aides better decision-making. Continuous disclosure is only mandatory for NSW Government Businesses such as State owned corporations.

Conclusion

Some agencies promote transparency and accountability by publishing on their websites a continuous disclosure policy that provides for, and encourages:

  • regular public disclosure of key performance information
  • disclosure of both positive and negative information
  • prompt reporting of significant issues.

4.2 Shared services

Service level agreements

Some agencies do not have service level agreements for their shared service arrangements.

Many of the agreements that do exist do not adequately specify controls, performance or reporting requirements. This reduces the effectiveness of shared services arrangements.

Conclusion

Agencies are better able to manage the quality and timeliness of shared service arrangements where they have a service level agreement in place. Ideally, the terms of service should be agreed before services are transferred to the service provider and:

  • specify the controls a provider must maintain
  • specify key performance targets
  • include penalties for non-compliance.

Shared service performance

Some agencies do not set performance standards for their shared service providers or regularly review performance results.

Conclusion

Agencies can achieve better results from shared service arrangements when they regularly monitor the performance of shared service providers using key measures for the benefits realised, costs saved and quality of services received.

Before agencies extend or renegotiate a contract, they should comprehensively assess the services received and test the market to maximise value for money.

All government sector employees must demonstrate the highest levels of ethical conduct, in line with standards set by The Code of Ethics and Conduct for NSW government sector employees.

This chapter looks at how well agencies are managing these requirements, and where they can improve their policies and processes.

We found that agencies mostly have the appropriate codes, frameworks and policies in place. But we have highlighted opportunities to improve the way they manage those systems to reduce the risks of unethical conduct.

Issues Recommendations or conclusions

5.1 Ethical framework

Code of conduct

All agencies we reviewed have a code of conduct, but they can still improve the way they update and manage their codes to reduce the risk of fraud and unethical behaviour.

Recommendation

Agencies should regularly review their code-of-conduct policies and ensure they keep their codes of conduct up-to-date.

Statement of business ethics

Most agencies maintain an ethical framework, but some can enhance their related processes, particularly when dealing with external clients, customers, suppliers and contractors.

Conclusion

Agencies can enhance their ethical frameworks by publishing a Statement of Business Ethics, which communicates their values and culture.

5.2 Potential conflicts of interest

Conflicts of interest

All agencies have a conflicts-of-interest policy, but most can improve how they identify, manage and avoid conflicts of interest.

Recommendation

Agencies should improve the way they manage conflicts of interest, particularly by:

  • requiring senior executives to make a conflict-of-interest declaration at least annually
  • implementing processes to identify and address outstanding declarations
  • providing annual training to staff
  • maintaining current registers of conflicts of interest.

Gifts and benefits

While all agencies already have a formal gifts-and-benefits policy, we found gaps in the management of gifts and benefits by some that increase the risk of unethical conduct.

Recommendation

Agencies should improve the way they manage gifts and benefits by promptly updating registers and providing annual training to staff.

Risk management is an integral part of effective corporate governance. It helps agencies to identify, assess and prioritise the risks they face and in turn minimise, monitor and control the impact of unforeseen events. It also means agencies can respond to opportunities that may emerge and improve their services and activities.

This year we looked at the overall maturity of the risk management frameworks that agencies use, along with two important risk management elements: risk culture and risk registers.

Issues Recommendations or conclusions

6.1 Risk management maturity

All agencies have implemented risk management frameworks, but with varying levels of maturity in their application.

Agencies’ averaged a score of 3.1 out of five across five critical assessment criteria for risk management. While strategy and governance fared best, the areas that most need to improve are risk culture, and systems and intelligence.

Conclusion

Agencies have introduced risk management frameworks and practices as required by the Treasury’s:

  • 'Risk Management Toolkit for the NSW Public Sector'
  • 'Internal Audit and Risk Management Policy for the NSW Public Sector'.

However, more can be done to progress risk management maturity and embed risk management in agency culture.

6.2 Risk management elements

Risk culture

Most agencies have started to embed risk management into the culture of their organisation. But only some have successfully done so, and most agencies can improve their risk culture.

 

 

Conclusion

Agencies can improve their risk culture by:

  • setting an appropriate tone from the top
  • training all staff in effective risk management
  • ensuring desired risk behaviours and culture are supported, monitored, and reinforced through business plans, or the equivalent and employees' performance assessments.

Risk registers and reporting

Some agencies do not report their significant risks to their lead agency, which may impair the way resources are allocated in their cluster. Some agencies do not integrate risk registers at a divisional and whole-of-enterprise level.

Conclusion

Agencies not reporting significant risks at the cluster level increases the likelihood that significant risks are not being mitigated appropriately.

Effective risk management can improve agency decision-making, protect reputations and lead to significant efficiencies and cost savings. By embedding risk management directly into their operations, agencies can also derive extra value for their activities and services.

Published

Actions for Planning and Environment 2017

Planning and Environment 2017

Planning
Environment
Asset valuation
Information technology
Internal controls and governance
Management and administration
Project management

The following report highlights results of financial audits of agencies in the Planning and Environment cluster. The report focuses on key observations and findings from the most recent audits of these agencies.

The audits were completed for most agencies in the cluster and unqualified audit opinions issued. Issues identified during the financial statement audits of seven small agencies delayed their finalisation beyond the statutory deadline, and six of these remain incomplete. Apart from these small agencies, the quality of financial reporting across the cluster remained at a high standard.

1. Financial reporting and controls

Financial reporting Unqualified audit opinions were issued for 39 of the 45 cluster agencies. Issues identified during the financial statement audits of seven small agencies delayed their finalisation beyond the statutory deadline. Six of these audits remain incomplete at the date of this report.
  Agencies completed early close procedures mandated by the Treasury. We noted opportunities for agencies to improve the effectiveness of these procedures.
Internal Controls One in six internal control weaknesses identified during the financial audits were repeat issues. Agencies should action audit recommendations promptly.
  User administration over financial systems needs to be strengthened to prevent inappropriate access to financial information.

2. Service Delivery

 
Housing completions Australian Bureau of Statistics data indicates the Department of Planning and Environment achieved the Premier's priority for housing completions in 2016–17. 
Increasing housing supply Australian Bureau of Statistics data shows the Department of Planning and Environment achieved the annual target of delivering over 50,000 housing approvals over the past three years.
Major project assessment Progress against the State priority target to reduce time taken to assess planning applications for State significant developments is difficult to determine as the measure is unclear.
Litter management The Environment Protection Authority's data indicates that progress towards the Premier's priority target for litter reduction slowed in 2016–17.
Cultural participation The Department of Planning and Environment’s data indicates overall attendance at cultural venues and events in New South Wales increased by 16 per cent in 2015–16.

This report provides Parliament and others with the audit results, observations and recommendations for Planning and Environment cluster agencies. The report has been structured into two chapters focussing on financial reporting and controls and service delivery.

The Planning and Environment cluster plays a role in ensuring each community across New South Wales receives the services and infrastructure it needs.

This chapter outlines our audit observations and recommendations related to financial reporting and controls of Planning and Environment cluster agencies for 2016–17.

Observation Conclusion or recommendation

2.1 Quality of financial reporting

Unqualified audit opinions were issued for 39 of the 45 cluster agencies' financial statements.

Issues identified during the financial statement audits of seven smaller agencies delayed their completion. Six audits remain incomplete at the date of this report.

Apart from these seven small agency audits, the quality of financial reporting across the cluster remained at a high standard.

2.2 Timeliness of financial reporting

Seven agencies' financial statement audits were not completed by the statutory deadline with six audits incomplete at the date of this report.

Issues identified during the financial statement audits of seven smaller agencies delayed their finalisation beyond the statutory deadline. These agencies would benefit from performing additional early close procedures in future reporting periods.

2.3 Financial and sustainability analysis

Water and Electricity utility agencies continue to operate with low liquidity ratios.

A liquidity ratio below one is an indicator that an entity may not be able to pay its debts as and when they fall due.

Whilst liquidity ratios were below one, utility agencies demonstrated they can continue to support ongoing operations due to:

  • access to regulated revenue streams

  • assets with long useful lives to generate revenue

  • debt funding limits approved by the NSW Treasurer under the Public Authorities (Financial Arrangements) Act 1987.

2.5 Internal controls

One in six internal control weaknesses reported in 2016–17 were repeat issues.

Delays in implementing audit recommendations can prolong the risk of fraud and error.

Recommendation (repeat issue): anagement letter recommendations to address internal control weaknesses should be actioned promptly, with a focus on addressing repeat issues.

Nine of these internal control weaknesses related to the creation, modification, deletion and review of user access to financial systems.

These control weaknesses may compromise the integrity and security of financial data.

Recommendation (repeat issue): Management of user administration over financial systems should be strengthened to prevent inappropriate access to financial information.

This chapter outlines our audit observations, conclusions and recommendations relating to service delivery for 2016–17.

Observation Conclusion or recommendation

3.1 Premier's and State priorities

The Planning and Environment cluster is responsible for delivering five Premier's and State priorities.

One priority target was achieved in 2016–17, two targets are on track to be achieved and progress towards one target slowed.

Progress against one target cannot be determined.

3.2 Planning

Housing Completion

 
There were 63,506 housing completions in
2016–17. This was 4.1 per cent above the Premier’s priority target of delivering 61,000 housing completions per year.
The Australian Bureau of Statistics data shows the housing completions target was achieved in
2016–17.

Housing supply

The number of approvals for new houses in
2016–17 was 72,472 against the State priority target of more than 50,000 approvals per year.
The Australian Bureau of Statistics data indicates the housing approvals target was achieved in
2016–17.

Major project assessment

 
State significant developments are not clearly defined for the purposes of reporting against the State priority target. The Department of Planning and Environment will clarify with the Department of Premier and Cabinet which developments are captured by the State priority target.
The Department of Planning and Environment’s data shows the time taken to assess complex State significant developments increased by 16 per cent in 2016–17 while the time taken to assess less complex developments reduced by 20 per cent. The Department of Planning and Environment considers it is on track to meet the State priority target of halving the time taken to assess State significant developments, despite uncertainty over the target measure.

Housing acceleration fund

 

Program business cases were not developed for projects in Housing Acceleration Fund Rounds 1 to 4.

The Department advised a program business case will be developed for Housing Acceleration Fund Round 5 projects.

A program business case is necessary to ensure related projects are evaluated, managed and coordinated effectively.
 

A benefit realisation review process has not yet been approved for Housing Acceleration Fund projects.

The Department of Planning and Environment advised it is developing a benefit realisation review process.

A benefit realisation review process is necessary to determine whether funded projects achieved intended outcomes.

Greater Sydney Commission

 
The Greater Sydney Commission forecasts a further 725,000 dwellings in the greater Sydney region will be required up to 2036 to meet housing demand. In response to population growth, the Commission has set a five-year housing supply target of 189,100 houses across the five Greater Sydney Commission districts.

ePlanning system

 
The Department of Planning and Environment did not perform a benefit realisation review for phase one of the ePlanning project. It has committed to performing a benefit realisation review after completion of phase two in 2018. It cannot be determined if phase one of the project delivered expected outcomes as a benefit realisation review was not performed.

3.3. Environment and Heritage

Litter volume in New South Wales was 6.6 litres per 1,000 square metres in 2016–17, an increase of 16 per cent from the prior year. This is above the Premier's priority litter volume target of 4.2 litres per 1,000 square metres by 2020. The Environment Protection Authority's data indicates the progress towards the target of reducing the volume of litter by 40 per cent by 2020 has slowed.
The NSW Government plans to invest $240 million to facilitate strategic biodiversity conservation on private land. Performance measures have not yet been developed for the private land conservation program.

3.4 Water

IPART reduced water usage charges for most Sydney Water Corporation customers in 2016–17. Water usage prices in New South Wales compare favourably to larger water utilities in other jurisdictions.

Hunter Water Corporation's water recycling and water conservation performance has been stable over recent years.

The volume of Sydney Water Corporation’s recycled water reduced by 12 per cent in 2016–17 compared to the previous year.

Sydney Water Corporation experienced reduced industry demand for recycled water. Several large industrial customers relocated away from Sydney.

3.5 Arts and culture

A State priority target is to increase overall attendance at cultural venues and events in New South Wales by 15 per cent from 2014–15 levels by 2019. The Department of Planning and Environment's data indicates overall attendance increased by 16 per cent in 2015–16, although attendance fluctuated across individual venues and events. This indicates progress towards achieving the overall target by 2019.

Published

Actions for Industry 2017

Industry 2017

Industry
Asset valuation
Compliance
Internal controls and governance
Procurement
Project management
Risk

The following report highlights the results of the financial audits of NSW Government entities in the Industry cluster. The report focuses on key observations and findings from the most recent audits of these entities.

The report notes that TAFE NSW will continue to incur extra costs each year to produce reliable financial information due to deficiencies in its student administration system. TAFE NSW plans to replace its Student Administration and Learning Management system in 2018-19 at an estimated cost of $89 million.

1. Financial reporting and controls

Financial reporting

Unqualified audit opinions were issued for 44 out of 48 financial statement audits with four audits incomplete. Early close procedures continue to promote earlier and better quality financial reporting.
Financial performance The cluster recorded a net deficit of $107 million in 2016–17 ($78.0 million in 2015–16). Contributing to the overall cluster net deficit was the Department's $226 million net deficit offset by net surpluses at Water NSW and the Forestry Corporation of New South Wales.
TAFE NSW continues to experience system issues TAFE NSW incurs extra costs each year to produce reliable financial information due to deficiencies in its student administration system. TAFE NSW plans to replace its Student Administration and Learning Management system in 2018–19 at an estimated cost of $89 million.
Internal controls

We identified 180 internal control issues, including 61 repeat issues across the cluster. We rated four of these issues as 'high' risk, 98 as ‘moderate’ risk and 78 as ‘low’ risk.

Of the 180 issues raised, 37 related to financial reporting and 52 related to controls over processes such as procurement and fixed assets.

Some internal control issues and recommendations identified in previous years, have been repeated and should be addressed promptly to reduce risks and improve processes.

Deficient user administration access Agencies need to strengthen user access administration to critical financial systems.

2. Service delivery

Premier and State Priorities    

Australian Bureau of Statistics data shows the Premier's priority for job creation has been achieved.

While performance has declined for the State priority to increase the proportion of people completing apprenticeships and traineeships, the Department advises it has initiatives in place to achieve this State priority, and the State priority for New South Wales to lead Australia in business confidence.

Crown land   The Department is working to respond to the recommendations from a Parliamentary Inquiry into Crown Land and to implement the revised framework contained in the Crown Land Management Act 2016.
Aboriginal land claims

Despite a continued focus, the Department has been unsuccessful in reducing the number of unprocessed Aboriginal land claims.

The Department should continue to implement measures to reduce the backlog of unprocessed Aboriginal land claims.

This report focuses on agencies in the Industry cluster. The report focuses on audit results, observations, conclusions and recommendations for financial reporting and controls, and service delivery.

This cluster leads the State's promotion of New South Wales as the place to invest and produce goods and services. Significant cluster agencies deliver services in the following areas:

Confidence in public sector decision-making and transparency is enhanced when financial reporting is accurate and timely. Appropriate financial controls help ensure the efficient and effective use of resources and administration of agency policies.

This chapter outlines audit observations, conclusions and recommendations for the financial reporting and controls of agencies in the cluster for 2016–17.

Observation Conclusion or recommendation
2.1 Quality of financial reporting
Unqualified audit opinions were issued for 44 out of 48 financial statement audits. Four audits are continuing. Ongoing improvements in the preparation of financial statements helped identify and resolve material issues.
The number of misstatements within the cluster fell from 104 in 2015–16 to 70 in 2016–17. The ‘early close procedures’ initiative introduced by the Treasury in 2011–12 has reduced the number of misstatements each year.
2.2 Timeliness of financial reporting
Most agencies complied with the Treasury’s early close procedures and the timetable for the preparation and audit of financial statements. Greater focus on financial reporting and effective early close procedures has improved the timeliness of financial reporting, but further improvements are required.
2.3 Key financial issues from cluster agencies
The Department of Industry completed a revaluation of Crown land and continues work on improving the accounting for Crown land. The value of Crown land recognised in the Department's financial statements at 30 June 2017 was $5.3 billion. The revaluation was carried out using a revised mass valuation approach which reduced complexity and subjectivity and improved transparency.
There is no process in place to ensure agencies recognise all the Crown land they manage and control. Recommendation: The Department should confirm the completeness and accuracy of the Crown land database with other organisations that manage and control Crown land to improve the reliability of its records.
TAFE NSW incurred approximately $6 million of direct costs to deal with issues in its student administration system and establish the integrity of its financial data for 2016–17. TAFE NSW will continue to incur extra costs each year to produce reliable financial information. TAFE NSW advises it intends to replace the Student Administration and Learning Management system it jointly implemented with the Department of Education three years ago at a cost $40.2 million. TAFE plans to implement the new system in 2018–19 at an estimated cost of $89 million.
 
2.4 Key financial information  
The cluster recorded a net deficit of $107 million in 2016–17 ($78.0 million in 2015–16). The overall cluster net deficit included the Department's $226 million net deficit which was partly offset by net surpluses in a number of other agencies, including Water NSW and the Forestry Corporation of New South Wales. Most agencies in the cluster, including the Department, but excluding the State owned corporations, are dependent on the NSW Government for the majority of their revenue.
 
2.5 Financial performance and sustainability  
We assessed the performance of certain agencies against key financial sustainability indicators. This identified four agencies with adjusted net deficits and two agencies with liquidity ratios below one. Overall, based on our analysis these agencies are not at high risk of sustainability concerns.
2.6 Internal controls  
A significant number of repeat internal control issues were again raised with management for certain agencies in the cluster.
 
Recommendation (repeat issue): Internal control issues and recommendations from previous years should be addressed promptly to reduce risks and improve processes.
User access administration over financial systems needs to be improved. 17 moderate risk issues related to user access administration across nine agencies were identified.

Recommendation: Agencies should ensure administration of user access to critical systems

  • retains documentation of approvals to create, modify and deactivate user access
  • allocates appropriate access rights
  • performs and documents regular user access reviews
  • logs and monitors privileged/super user account activity
  • deactivates terminated user access on a timely basis
  • does not allow shared generic user accounts, instead of unique user accounts for staff performing administration tasks.

Government outcomes can be achieved by delivering services through a mix of the public, private or not-for-profit sectors. Service delivery reform is most successful if there is clear accountability for service delivery outcomes, decisions are aligned to the government's strategic direction, and performance and value for money are monitored and evaluated.

This chapter outlines our audit observations, conclusions and recommendations for the service delivery of agencies in the cluster for 2016–17.

Issues Conclusion or recommendation

3.1 Measuring and reporting on performance

The Department is responsible for two State priorities (increasing apprenticeships and business confidence) and the Premier's priority of creating jobs. The Department also supports four state priorities. Australian Bureau of Statistics data shows the Premier's priority for job creation continues to be achieved. The Department reported that the number of people completing apprenticeships and traineeships had declined to 59 per cent against a 2019 target of 65 per cent, while the State was ranked first or second on a range of business confidence indicators.

3.2 Improvements required in the administration of Crown land

The Department faces many challenges in the administration of Crown land. These challenges range from inadequate systems and processes through to satisfying competing commercial, environmental, and community interests.

The Department has implemented, or is implementing the recommendations from a performance audit on the Sale and Lease of Crown land and the Parliamentary Inquiry into Crown land.

It is also implementing the revised framework for Crown land contained in the Crown Land Management Act 2016.

3.3 Aboriginal land claims over Crown land

The number of unprocessed Aboriginal land claims continues to increase. Work on finalising Aboriginal Land Agreements, which may help address the claims backlog, is continuing. Recommendation (repeat Issue): The Department should continue to implement measures to reduce the number of unprocessed Aboriginal land claims.
 

3.4 Skills development

Eleven contracted Smart and Skilled service providers had their contracts cancelled for quality issues. There were 391 providers of Smart and Skilled qualifications as at October 2017. The Department of Industry spent $1.4 billion on the provision of vocational education and training. The Department has controls in place to monitor the performance of contracted service providers to ensure quality delivery of training.

Published

Actions for Family and Community Services 2017

Family and Community Services 2017

Community Services
Asset valuation
Compliance
Financial reporting
Information technology
Internal controls and governance
Procurement
Project management

The following report focuses on key observations and findings from the most recent audits of agencies in the Family and Community Services cluster.

The report includes a range of findings on service delivery. The Department of Family and Community Services' data indicates that family preservation programs are having a positive impact on children and young people entering statutory care. On the other hand, waiting times for social housing applicants increased in 2016-17.
 

1. Financial reporting and controls

Quality of financial reporting Unqualified audit opinions were issued for all cluster agencies' financial statements.   
Timeliness of financial reporting Agencies completed mandatory early close procedures and all but one agency submitted financial statements by the statutory deadline.
Internal controls The 2016–17 audits reported 29 internal control improvements to cluster agencies’ management. None of these findings were high risk. Eleven related to information technology control weaknesses in key financial business systems.

2. Service Delivery

Commissioning Non-government organisations (NGOs) received $2.6 billion in 2016–17 to deliver services.
Children and young people

The Department of Family and Community Services data indicates that family preservation programs are reducing the number of children and young people entering statutory care.

The Department's data shows 86 per cent of children and young people in statutory care had their placements reviewed in the 12 months to 30 June 2017. Legislation requires all placements are reviewed at least every 12 months.

Social Housing The Department's data shows waiting times for social housing applicants are longer than last year.
People with disability Under the current timetable for implementing the National Disability Insurance Scheme, the Department plans to transfer direct disability services to NGOs by 30 June 2018.

This report provides Parliament and others with the audit results, observations, conclusions and recommendations for Family and Community Services cluster agencies. The report has been structured into two chapters focusing on financial reporting and controls and service delivery.

The Family and Community Services cluster works with children, adults, families and communities to improve lives and help people realise their potential.

This chapter outlines audit observations, conclusions and recommendations related to the financial reporting and controls of agencies in the Family and Community Services cluster for 2016–17.

Financial reporting is an important element of good governance. Confidence in public sector decision making and transparency is enhanced when financial reporting is accurate and timely.

Appropriate financial controls help ensure the efficient and effective use of resources and administration of agency policies. They are essential for quality and timely decision making.

Observation Conclusion or recommendation
2.1 Quality of financial reporting
Unqualified audit opinions were issued for all cluster agencies' financial statements. The quality of financial reporting remains high across the cluster.
2.2 Timeliness of financial reporting
Agencies completed mandatory early close procedures and all but one submitted financial statements by the deadline. Early close procedures continue to allow issues and financial reporting risk areas to be addressed early in the audit process. There are opportunities to improve effectiveness of early close procedures.
2.3 Internal controls
The 2016–17 audits reported 29 internal control weaknesses. While none were high risk, the Department had five repeat issues.

 
Management accepted the audit findings and advised they are actioning recommendations. Timely action is important to ensure internal controls operate effectively.
Eleven of these internal control weaknesses were related to IT system user access administration and security over financial systems.

Controls weaknesses may compromise the integrity and security of financial data.

Recommendation

Agencies should:

  • ensure policies for creating, modifying and deactivating user access are documented
  • enhance the current user access review process
  • log and monitor highly privileged user account activity
  • ensure timely removal of access to business systems for terminated and casual employees
  • ensure password parameters comply with internal policies.

Government outcomes can be improved by delivering the right mix of services, whether from the public, private or not for profit sectors. Service delivery reform will be most successful if there is clear accountability for service delivery outcomes, decisions are aligned to strategic direction and performance is monitored and evaluated.

This chapter outlines our audit observations, conclusions and recommendations related to service delivery by agencies in the Family and Community Services cluster for 2016–17.

Observation Conclusion or recommendation

3.1 Commissioning

Non-government organisations (NGOs) received $2.6 billion funding in 2016–17 to deliver services. Commissioning of service delivery can change the profile of risks that need to be managed. The Department has established a Commissioning Division and developed its ‘Commissioning for Better Outcomes Framework’. 

3.2 Children and young people

All the Department's Districts are accredited to provide out-of-home care services.

The Department's data indicates 66 more children and young people were in statutory care at 30 June 2017 compared to 30 June 2016. This contrasts to the previous year where 1,150 more children were in statutory care at 30 June 2016 than at 30 June 2015.

The Department is complying with out-of-home care service standards, but one District has an additional condition attached to its accreditation.

Department’s data indicates that family preservation programs are having a positive impact..

The Department's data shows 86 per cent of children and young people in statutory care had their placement reviewed at 30 June 2017.

The Department’s data shows, at 30 June 2017, 41 per cent of children and young people with closed case plans for the 12 months ended 30 June 2016 were re-reported at risk of significant harm.

The Department did not meet the legislative requirement to review the placement of all children and young people in statutory care annually.

The number of children being re-reported at risk of significant harm is above the Premier’s Priority target of 34 per cent by June 2019.
 

3.3. Social Housing

Waiting time for priority and non-priority social housing applicants increased in 2016–17, by 19 per cent and 3 per cent respectively. Some factors impacting waiting time for social housing applicants are outside the control of the Department.

3.4 People with disability

A Bilateral Agreement between the Australian and NSW Governments sets out how eligible persons access the National Disability Insurance Scheme (NDIS) between 1 July 2016 and 30 June 2018.
 
Under the timetable for the NDIS, the Department plans to transfer direct disability services to NGOs.
 

Published

Actions for Universities 2016 Audits

Universities 2016 Audits

Universities
Asset valuation
Compliance
Cyber security
Financial reporting
Fraud
Information technology
Internal controls and governance
Procurement

No qualified opinions were issued on the universities’ financial statements and the quality and timeliness of financial reporting continued to improve. The report found that all NSW universities recorded a surplus in 2016 with combined revenue growth exceeding expense growth by 1.1 per cent. Universities have diversified revenue sources and are now less reliant on government grants. Combined overseas student income exceeded domestic student income for the first time in 2016.

This report analyses the results of the financial statement audits of the ten NSW universities and their controlled entities for the year ended 31 December 2016. The table below summarises key observations.  

This report focuses on key observations and common issues identified from our financial audits of the ten NSW universities and their controlled entities in 2016. The universities are listed in Appendix Three.

In this report, parliament and other users of universities’ financial statements are provided with an analysis of universities’ results and key observations in the following areas:

  • Financial Performance and Reporting
  • Financial Controls
  • Governance
  • Teaching and Research.

Snapshot of NSW universities

A snapshot of NSW universities for the year ended 31 December 2016 is shown below.

Financial performance and reporting are important elements of good governance. Confidence in public sector decision making and transparency is enhanced when financial reporting is accurate and timely.

This chapter outlines audit findings on financial performance and reporting of NSW universities for 2016. 

Appropriate financial controls help ensure the efficient and effective use of resources and the implementation and administration of university policies. They are essential for quality and timely decision making.

In 2016, our audit teams made the following key observations on the financial controls of NSW universities.

Governance refers to the high-level frameworks, processes and behaviours that ensure universities meet their intended purpose, conform with legislative requirements, and meet expectations of probity, accountability and transparency.

This chapter outlines audit findings on the governance of NSW universities and their controlled entities. 

Teaching and research are core activities of universities. The quality of teaching is a key driver for growth and attracting students. Through research, universities contribute to economic growth, lead innovation and improve their global rankings.  

This chapter reports on teaching and research in NSW universities for 2016.

Published

Actions for Industry, Skills, Electricity and Water 2016

Industry, Skills, Electricity and Water 2016

Industry
Asset valuation
Compliance
Cyber security
Financial reporting
Fraud
Information technology
Internal controls and governance
Procurement
Project management

The Auditor-General, Margaret Crawford released a report today highlighting a decline in net profits of electricity agencies and the distributions the government received from these agencies. The report also details continuing issues in the management of Crown Land and TAFE NSW's student administration system.

Published

Actions for Planning and Environment 2016

Planning and Environment 2016

Planning
Environment
Asset valuation
Compliance
Financial reporting
Fraud
Information technology
Internal controls and governance
Project management

Auditor-General, Margaret Crawford released a report on the planning and environment cluster today, concluding that the quality of financial reporting is improving. However, the cluster can improve its financial controls and governance framework.

Published

Actions for Family and Community Services 2016

Family and Community Services 2016

Community Services
Asset valuation
Compliance
Financial reporting
Fraud
Information technology
Internal controls and governance
Project management
Risk

The Family and Community Services report was released today by the Acting Deputy Auditor-General. Financial reporting within the cluster continues to improve but there are opportunities to improve governance and performance reporting.

Published

Actions for Areas of focus in 2015

Areas of focus in 2015

Whole of Government
Asset valuation
Compliance
Financial reporting
Information technology
Internal controls and governance
Project management
Risk

This report focuses on key observations from financial and performance audits in 2015. The findings have been broadly classified into four themes, which has informed the focus of financial and performance audits for 2016.