Refine search Expand filter

Reports

Published

Actions for Transport and Infrastructure 2022

Transport and Infrastructure 2022

Transport
Asset valuation
Financial reporting
Information technology
Infrastructure
Management and administration
Procurement

What the report is about

Result of the Transport and Infrastructure cluster agencies' financial statement audits for the year ended 30 June 2022.

What we found

Unmodified audit opinions were issued for all Transport and Infrastructure cluster agencies' financial statements.

An 'other matter' paragraph was included in TAHE's Independent Auditor's Report for its 30 June 2022 financial statements which draws attention to Transport and Asset Holding Entity's (TAHE) reliance on government-funded customers.

We included an ‘emphasis of matter’ paragraph in the Independent Auditor’s Report for State Transit Authority of New South Wales’ (the authority) 30 June 2022 financial statements, which draws attention to the financial statements being prepared on a liquidation basis as the authority’s principal activities ceased operations on 3 April 2022.

What the key issues were

The 2021–22 audits identified five high-risk findings:

  • detailed business modelling to support returns from TAHE
  • valuation of assets at TAHE
  • control of assets at TAHE
  • accounting and valuation of tree assets at Centennial Park and Moore Park Trust and Parramatta Park Trust.

Access and licence fees - TAHE

Revised commercial agreements were signed between TAHE, the operators and Transport for NSW on 23 June 2022 to reflect increased access and licence fees detailed in the 18 December 2021 Heads of Agreement.

TAHE’s ability to generate the expected return of 2.5% based on the current modelling is heavily reliant on the government funding the public rail operators (TAHE's customers).

There are risks that:

  • TAHE will not be able to recontract for access and licence fees at a level that is consistent with current projections
  • future governments' funding to TAHE's key customers will not be sufficient to fund payment of access and licence fees at a level that is consistent with current projections
  • TAHE will be unable to grow its non-government revenues.

Valuation of assets - TAHE

Although TAHE's selected valuation of assets falls within an acceptable range, there remains a significant gap between what has been assessed as an acceptable range and TAHE's range.

What we recommended

Control of assets - TAHE

While we accepted TAHE’s position on control for the current year, NSW Treasury and TAHE should continue to monitor the risk that control of TAHE assets could change in future reporting periods. TAHE must continue to demonstrate control of its assets or the current accounting presentation would need to be reconsidered.

This report provides Parliament and other users of the Transport and Infrastructure cluster’s financial statements with the results of our audits, analysis, conclusions and recommendations in the following areas:

  • financial reporting
  • audit observations.

Financial reporting is an important element of good governance. Confidence and transparency in public sector decision-making are enhanced when financial reporting is accurate and timely.

This chapter outlines our audit observations related to the financial reporting of agencies in the Transport and Infrastructure cluster (the cluster) for 2022.

Section highlights

  • Unqualified audit opinions were issued on all Transport and Infrastructure cluster agencies' financial statements.
  • An 'Other Matter' paragraph was included in the Transport Asset Holding Entity of New South Wales' (TAHE) Independent Auditor's Report to draw attention to TAHE's reliance on government-funded customers.
  •  An 'Emphasis of Matter' paragraph was included in the State Transit Authority of New South Wales' (the authority) Independent Auditor's Report to draw attention to management’s disclosures that State Transit Authority of New South Wales' financial statements for the year ended 30 June 2022 were prepared on a liquidation basis as the authority’s principal activities ceased operations on 3 April 2022.
  • While TAHE's valuation of assets at 30 June 2022 was within an acceptable range of valuation outcomes, there remained significant differences in assumptions used when compared with relevant market benchmarks.
  • Sydney Metro corrected two prior period errors of $1.5 billion and $51 million in accounting and valuation of assets, and double counting of assets capitalised in infrastructure as well as assets under construction respectively.

 

Appropriate financial controls help ensure the efficient and effective use of resources and administration of agency policies. They are essential for quality and timely decision-making.

This chapter outlines our observations and insights from our financial statement audits of agencies in the cluster.

Section highlights

  • The number of findings reported to management decreased from 87 in 2020–21 to 59 in 2021–22.
  • Repeat findings accounted for 54.2% of management letter points. Many repeat findings related to controls over payroll, including management of annual leave and processing of timesheets, management of conflicts of interests, weaknesses in controls over information technology user access administration and password management.
  • One new high-risk issue was identified in 2020–21, and four high-risk repeat issues remained.
  • The five high-risk issues arose from the audit in the cluster, with respect to:
    • control over TAHE assets and operations (repeat)
    • TAHE detailed business modelling to support returns (repeat)
    • valuation of trees (repeat for Parramatta Park Trust and Centennial Park and Moore Park Trust)
    • TAHE asset valuations.

 

Appendix one – Misstatements in financial statements submitted for audit

Appendix two – Early close procedures

Appendix three – Timeliness of financial reporting

Appendix four – Financial data

 

Copyright notice

© Copyright reserved by the Audit Office of New South Wales. All rights reserved. No part of this publication may be reproduced without prior consent of the Audit Office of New South Wales. The Audit Office does not accept responsibility for loss or damage suffered by any person acting on or refraining from action as a result of any of this material.

Published

Actions for Planning and Environment 2022

Planning and Environment 2022

Environment
Industry
Local Government
Planning
Asset valuation
Compliance
Financial reporting
Information technology
Infrastructure
Internal controls and governance
Management and administration
Risk

What the report is about

Result of the Planning and Environment cluster agencies' financial statements audits for the year ended 30 June 2022.

What we found

Unmodified audit opinions were issued for all completed 30 June 2022 financial statements audits of cluster agencies. Seven audits are ongoing.

Disclaimed audit opinions were issued for the 2010–11 to 2015–16 financial statements of the Water Administration Ministerial Corporation (WAMC), as management was unable to certify that the financial statements exhibit a true and fair view of WAMC's financial position and financial performance.

Qualified audit opinions were issued for WAMC's 2016–17 and 2017–18 financial statements due to insufficient evidence to support the completeness and valuation of water meters infrastructure assets, the impairment of water meters, and the completeness of buildings at Nimmie Caira.

Unqualified audit opinions were issued for WAMC's 2018–19 and 2019–20 financial statements.

The Department of Planning and Environment (the department) assessed 45 Category 2 Statutory Land Managers (SLM) did not meet the reporting exemption criteria and therefore were required to prepare 2021–22 financial statements. None of these 45 Category 2 SLMs prepared and submitted their 30 June 2022 financial statements by the statutory reporting deadline.

All 119 Commons Trusts have never submitted their financial statements for audit as required by the Government Sector Finance Act 2018 (GSF Act).

NSW Treasury has confirmed that the Catholic Metropolitan Cemeteries Trust (CMCT) is a controlled entity of the State. To date, CMCT has not met its obligations to prepare financial statements under the GSF Act and it has not submitted financial statements to the Auditor-General for audit.

What the key issues were

Since 2017, the Audit Office has recommended the department address the different practices across the local government sector in accounting for rural firefighting equipment. Despite repeated recommendations, the department did little to resolve this issue. At the time of writing, 32 of 118 completed council audits received qualified audit opinions on their 30 June 2022 financial statements.

There continues to be significant deficiencies in Crown land records. The department uses the Crown Land Information Database (CLID) to record key information relating to Crown land in New South Wales that is managed and controlled by the department and land managers. The CLID system was not designed to facilitate financial reporting, and the department is required to conduct extensive adjustments and reconciliations to produce accurate information for the financial statements.

The department implemented the CrownTracker system as a replacement for CLID. The project was finalised in June 2022, but it has not achieved the intended outcomes.

Nine high-risk issues were identified across the cluster related to the findings outlined above and weaknesses in IT general controls, financial reporting, governance processes and internal controls.

Recommendations were made to address these deficiencies.

This report provides Parliament and other users of the Planning and Environment cluster’s financial statements with the results of our audits, analysis, conclusions and recommendations in the following areas:

  • financial reporting
  • audit observations.

Financial reporting is an important element of good governance. Confidence and transparency in public sector decision-making are enhanced when financial reporting is accurate and timely.

This chapter outlines our audit observations related to the financial reporting of agencies in the Planning and Environment cluster (the cluster) for 2022.

Section highlights

  • Unqualified audit opinions were issued for all completed 30 June 2022 financial statements audits of cluster agencies. Seven audits are ongoing. The audit of the Catholic Metropolitan Cemeteries Trust(CMCT) has not been able to commence, despite repeated requests to do so.
     
  • The audits of the Water Administration Ministerial Corporation's (WAMC) financial statements for the years ended 30 June 2011 to 30 June 2020 were completed in November 2022. These audits had been long outstanding due to insufficient records and evidence to support the transactions and balances of WAMC, particularly for the earlier years. In recent years, management commenced actions to improve WAMC's governance and financial management, and finalise the outstanding audits.

    Disclaimed audit opinions were issued on the 2010–11 to 2015–16 financial statements as management was unable to certify that the financial statements exhibit a true and fair view of WAMC's financial position and financial performance.

    Qualified audit opinions were issued for the 2016–17 and 2017–18 financial statements due to insufficient evidence to support the completeness and valuation of water meters infrastructure assets, the impairment of water meters, and the completeness of buildings at Nimmie Caira.

    Unqualified audit opinions were issued for the 2018–19 and 2019–20 financial statements.

    The 2020–21 and 2021–22 WAMC audits are in progress.
     
  • The Department of Planning and Environment (the department) assessed 45 Category 2 Statutory Land Managers (SLM) did not meet the reporting exemption criteria and therefore were required to prepare 2021–22 financial statements. None of these 45 Category 2 SLMs prepared and submitted their 30 June 2022 financial statements by the statutory reporting deadline.

    All 119 Commons Trusts have never submitted their financial statements for audit as required by the Government Sector Finance Act 2018 (GSF Act).

    The department needs to do more to ensure Category 2 SLMs and Commons Trusts meet their statutory reporting obligations.

    The department and Category 2 SLMs should finalise their reporting exemption assessments earlier to allow sufficient time for the non-exempted SLMs to prepare and submit annual financial statements by the statutory reporting deadline.
     
  • NSW Treasury has met with the Catholic Metropolitan Cemeteries Trust (CMCT) to consider their perspective as part of confirming CMCT is a controlled entity of the State for the purposes of financial reporting. NSW Treasury has confirmed that the CMCT is a controlled entity of the State. This means that the CMCT is statutorily obliged under section 7.6 of the GSF Act to prepare financial statements in accordance with the GSF Act and Treasurer's Directions, and give them to the Auditor-General for audit pursuant to the Government Sector Audit Act 1983 (GSA Act). Section 34 of the GSA Act requires the Auditor-General to furnish an audit report on these financial statements.

    The department wrote to CMCT to request it work with, and offer full assistance to, the Auditor-General in the exercise of her duties. To date, the CMCT has not met its obligations to prepare financial statements under the GSF Act as it has not submitted its financial statements to the Auditor-General for audit despite repeated requests, and has not provided access to its books and records for the purposes of a financial audit. The CMCT contends that they are not a GSF agency as defined by the GSF Act and therefore not a controlled entity of the State.
     
  • Six agencies required to perform early close procedures did not complete a total of 11 mandatory procedures. Incomplete procedures included the delayed resolution of matters raised in prior years and two agencies did not record movements in the fair value of physical assets in the financial statements.

 

Appropriate financial controls help ensure the efficient and effective use of resources and administration of agency policies. They are essential for quality and timely decision-making.

This chapter outlines our observations and insights from our financial statement audits of agencies in the Planning and Environment cluster.

Section highlights

  • Since 2017, the Audit Office of New South Wales has recommended that the Department of Planning and Environment (the department) address the different practices across the local government sector in accounting for rural firefighting equipment. Despite repeated recommendations, the department did little to resolve this issue, and in 2022, 32 of 118 completed audits of councils received qualified audit opinions on their 2022 financial statements.
    Consistent with the department’s role to assess councils' compliance with legislative responsibilities, standards or guidelines, the department should intervene where councils do not recognise rural firefighting equipment.
  • There continues to be significant deficiencies in Crown land records. The department should implement an action plan to ensure the Crown land database is complete and accurate.
  • The number of findings reported to management decreased from 161 in 2020–21 to 132 in 2021–22. Eight high-risk findings were identified during 2021–22, of which six were repeat issues. One new high-risk finding related to deficiencies in governance processes and internal controls identified as a part of the Water Administration Ministerial Corporation's 2011–2020 financial statements audits.
  • The department and NSW Treasury did not comply with section 35 of the Energy and Utilities Administration Act 1987 (EUA Act). However, complying with the EUA Act could create non-compliance with other pieces of legislation. Amendments to the EUA Act have been made to resolve this inconsistency. The amendment took effect from April 1999.

 

Appendix one – Misstatements in financial statements submitted for audit

Appendix two – Early close procedures

Appendix three – Timeliness of financial reporting

Appendix four – Financial data

Appendix five – Councils received qualified audit opinions 

Copyright notice

© Copyright reserved by the Audit Office of New South Wales. All rights reserved. No part of this publication may be reproduced without prior consent of the Audit Office of New South Wales. The Audit Office does not accept responsibility for loss or damage suffered by any person acting on or refraining from action as a result of any of this material.

Published

Actions for Development applications: assessment and determination stages

Development applications: assessment and determination stages

Planning
Local Government
Internal controls and governance
Management and administration
Service delivery

What the report is about

Local councils in New South Wales are responsible for assessing local and regional development applications.

Most development applications are assessed and determined by council staff under delegated authority. However, some development applications must be referred to independent local planning panels or Sydney and regional planning panels for determination.

Councils provide support to local planning panels. The Department of Planning and Environment provides support to Sydney and regional planning panels.

This audit assessed whether Byron Shire Council, Northern Beaches Council and The Hills Shire Council had effectively assessed and determined development applications in compliance with legislative and other requirements.

It also assessed whether The Hills Shire Council, Northern Beaches Council and the Department of Planning and Environment had provided effective support to relevant independent planning panels.

What we found

All councils had established clear roles, responsibilities and delegations for assessment and determination of development applications and had also established processes to ensure quality of assessment reports.

Northern Beaches Council and The Hills Shire Council have established comprehensive approaches to considering and managing risks related to development assessment.

Northern Beaches Council's approach to publishing its assessment reports promotes transparency.

Across a sample of development applications assessed and determined between 2020–22:

  • Northern Beaches Council and The Hills Shire Council had assessed and determined applications in compliance with legislative and other requirements. However, The Hills Shire Council could do more to transparently document any conflicts of interest within assessment reports.
  • Byron Shire Council had assessed most applications in compliance with legislative and other requirements. However, we found opportunities for the Council to:
    • ensure determinations were made in line with delegations
    • strengthen its approach to transparent management of conflicts of interest and quality review of assessments.

The Hills Shire Council and Northern Beaches Council had effectively supported their respective local planning panels.

The Department of Planning and Environment had processes that meet requirements for supporting regional planning panels but could do more to promote consistency in approach, share information across panels and measure the effectiveness of its support.

What we recommended

We made recommendations to Byron Shire Council, The Hills Shire Council and the Department of Planning and Environment to address the gaps identified and improve the transparency of processes.

Local councils in New South Wales are responsible for assessing local and regional development applications under the Environmental Planning and Assessment Act 1979 (EP&A Act).

In assessing development applications, councils consider:

  • whether the proposed development application is compliant with legislation and environmental planning instruments
  • whether the proposed development meets local planning controls and objectives
  • any environmental, social and economic impacts
  • any submissions from impacted properties, neighbours and interested parties
  • the public interest.

Once assessed, a development application will be determined by council staff under delegated authority, the elected council, or an independent planning panel.1 

The involvement of a particular independent planning panel is established under legislative and policy instruments, and depends on the type and value of the proposed development. Most development applications are assessed and determined by council staff under delegated authority.

In determining development applications, independent planning panels must manage any potential, real or perceived conflicts of interest of panel members for a given development application, meet and vote on development applications, and publish their decisions and reasons.

Under the EP&A Act, and as required by statutory instruments and procedures, councils and the Department of Planning and Environment (DPE) must provide secretariat and other support functions to independent planning panels.

Previous reviews and inquiries have identified several significant risks that are present within the processes involved in the assessment and determination of development applications. These risks include possible non-compliance with complex legal and policy requirements, potential improper influence from developers and other stakeholders, and a perceived lack of transparency within the planning system and planning outcomes.

There are several planning pathways for development in New South Wales. This audit focuses on local and regional development that requires assessment and determination by a local council and/or an independent local planning panel or Sydney or regional planning panel in three Local Government Areas (LGAs): Byron Shire Council, Northern Beaches Council, The Hills Shire Council.

Audited councils were selected from a range of criteria, including:

  • the number, value and types of development applications determined in 2018–19
  • average determination timeframes
  • appeals against determinations and Land and Environment Court outcomes
  • LGA demographics.

The audit also avoided councils that had previously been subject to a performance audit.

The objective of this audit was to assess whether:

  • selected councils have effectively assessed and determined development applications in compliance with relevant legislation, regulations and government guidance
  • selected councils and DPE effectively support independent planning panels to determine development applications in compliance with relevant legislation, regulations and government guidance.

Conclusion – Byron Shire Council

Byron Shire Council has established clear roles, responsibilities and delegations for assessment and determination of development applications. However, the effectiveness of the Council's approach is limited by gaps in governance, risk management and internal controls.

Byron Shire Council has established clear roles, responsibilities and delegations for assessment and determination of development applications. However, the Council does not have a consolidated policy and procedure for development assessment, has not adequately followed up on the outcomes of internal reviews that identified opportunities to strengthen its assessment and determination procedures and approach, and has not demonstrated that it has managed relevant risks effectively.

The Council has not ensured that delegations have been consistently followed in the assessment of development applications.

Byron Shire Council's approach to managing conflicts of interest in development assessments does not provide transparency over potential conflicts of interest.

Byron Shire Council manages the risk of conflicts of interest for development assessment under its Code of Conduct. The Council has also implemented a separate policy that details additional requirements for managing conflicts of interest relevant to the development assessment process, but has not regularly updated this policy and requirements between it and the Code of Conduct have not been aligned. This creates a risk that planning staff may be following inconsistent or outdated advice in managing conflicts of interest.

Across the period of review, the Council did not require staff to provide a disclosure of interest for individual development applications to be contained within assessment reports. Including these disclosures would increase transparency and ensure that staff are sufficiently considering any conflicts of interest relevant to each separate assessment process.

Byron Shire Council has processes that promote compliance with legislation, regulation and government policy, but can improve how it undertakes some aspects of these that would ensure transparency, quality and consistency.

Our review of a sample of completed development applications from the Council indicated that most assessments were completed in compliance with relevant legislation, regulations and government guidance, but that there were some opportunities to improve elements of the assessment process, including: transparency of any conflicts of interest involved in the assessment process, ensuring compliance with delegated authority limits, and consideration of modification application provisions.

The Council has established templates to guide planners through relevant assessment considerations required by legislation, regulations and other guidance. However, it could do more to strengthen its approach to peer or manager review, monitoring legislative changes, and how it monitors the completion of relevant training by planning staff. 

 

Conclusion – Northern Beaches Council

Northern Beaches Council has established processes to support compliant and effective assessment and determination of development applications.

The Council has a clear governance and risk management framework for development assessment that sets out roles, responsibilities and delegations.

Northern Beaches Council has established clear roles, responsibilities and delegations for development application assessment and determination. The Council has identified development assessment related risks, and has put in place controls and mitigating actions to manage the risks to within risk tolerances.

Northern Beaches Council's approach to managing conflicts of interest promotes transparency.

Northern Beaches Council manages the risk of conflicts of interest for development assessment under its Code of Conduct. The Council has implemented an additional framework for planning staff to respond to the risk of conflicts of interest in development assessment processes. This framework requires its staff to disclose any conflicts of interest as a formal step in assessing development applications and includes declarations of any interests within assessment reports or planning panel minutes.

Our review of a sample of completed development applications indicated that the assessment reports had been compliant with the Council's approach to transparently documenting conflicts of interest.

Northern Beaches Council has established processes to deliver consistent, quality assessment of development applications.

Northern Beaches Council staff use an electronic development assessment tool that provides guidance, links to legislative and policy instruments and other applications that support assessment and drive consistency in approach. The Council applies a peer review process in which a manager or team member in a more senior position reviews an assessment report prior to determination to ensure that expected standards of quality and consistency have been met.

Our review of a sample of completed development applications indicated that assessments were undertaken in compliance with relevant legislation, regulations and government guidance.

Northern Beaches Council transparently documents assessment reports, supporting information and determination outcomes.

Northern Beaches Council has implemented a transparent approach to how it assesses and determines development applications. The Council publishes assessment reports, supporting technical reports, plans and submissions for all development applications. Notices of determination and final plans are also published alongside the assessment reports, allowing for greater transparency to the public.

Northern Beaches Council has established processes to effectively support the Northern Beaches Local Planning Panel.

Northern Beaches Council has established processes to support the Northern Beaches Local Planning Panel as required under legislative and policy instruments. The Council has processes to ensure that development applications required to be referred to a planning panel are identified and monitored, supports identification and documentation of any conflicts of interest, and transparently documents decisions of the panel.

Our review of a sample of meeting records held across the audit period of review indicated that these requirements were met and were transparently documented. 

 

Conclusion – The Hills Shire Council

The Hills Shire Council has established processes to support compliant and effective assessment and determination of development applications.

The Council has established a comprehensive governance and risk management framework for development assessment that sets out clear roles, responsibilities and delegations.

The Hills Shire Council has established a comprehensive framework for managing risks related to development assessment. Such risks are clearly identified and associated controls are in place to reduce or mitigate the risks. The Council has undertaken regular internal audits of development assessments, including reviewing completed applications to ensure compliance with relevant legislative and policy requirements.

The Council has established clear roles, responsibilities and delegations, and its staff assessing and determining development applications are supported by a standard set of policies and procedures for undertaking assessment and determination of applications.

The Hills Shire Council is managing conflicts of interest in line with Code of Conduct requirements but could more transparently document these.

The Hills Shire Council manages conflicts of interest for those involved in development application processes through provisions under its Code of Conduct. Under this Code of Conduct, staff must declare any conflicts of interest to their manager. However, the Council does not require staff to disclose any conflicts of interest in development application assessment reports which limits transparency to reviewing managers or any other determination bodies.

The Hills Shire Council has established processes to deliver consistent, quality assessment of development applications.

The Hills Shire Council has established templates to guide planners through relevant development assessment and determination considerations required by legislation, regulations and other guidance. The Council requires a peer review to occur prior to any determination which ensures a check on the compliance and quality of the assessment report prepared.

Our review of a sample of completed development applications from the Council indicated that assessments were performed in compliance with relevant legislation, regulations and government guidance.

The Hills Shire Council has established processes to effectively support The Hills Shire Local Planning Panel.

The Hills Shire Council has met requirements to provide secretariat and other support to The Hills Shire Local Planning Panel as required under legislative and policy instruments. It has processes to ensure that development applications required to be referred to a planning panel are identified and monitored, supports identification and documentation of any conflicts of interest, and transparently documents decisions of the panel.

Our review of a sample of meeting records held across the audit period of review indicated that these requirements were met and were transparently documented. 

 

Conclusion – Department of Planning and Environment

The Department of Planning and Environment (DPE) has established processes that meet its statutory and policy requirements to support Sydney and regional planning panels.

DPE has established processes to provide secretariat and other support to planning panels. It has met requirements to provide administrative support to the panels through its planning panels secretariat including undertaking administrative functions, supporting recruitment of panel members, and addressing complaints about the panel processes.

DPE has not ensured collection of annual pecuniary interest declarations for all panel members for the three Sydney and regional planning panels in scope for this audit. DPE could not provide annual pecuniary interest declarations for part of the audit period for three of the 47 members of these panels, as is required by DPE's Code of Conduct for Regional Planning Panels.

DPE does not formally measure its effectiveness in providing support to panels, but panel chairs consulted as part of this audit advised that they had no concerns with the level of secretariat support provided by DPE.

DPE could do more to facilitate information sharing between panels and could formalise how it provides comparative information to panels to improve consistency and standardisation in approach and share good practice. DPE has identified these gaps in reviews of its services and functions and has a plan in place to address them.

DPE has effectively documented planning panel decisions and made them available to all stakeholders. It also effectively documented interests declared as part of consideration of development applications for in-scope panels. 


1 Prescribed councils within designated Sydney districts are required to refer contentious development applications to local planning panels for determination. If the proposed development is above a threshold for estimated cost of works, or meets other prescribed criteria, the EP&A Act may require it to be referred to a Sydney or regional planning panel.

This audit continues a series of audits examining the development assessment process in NSW local councils and is focused on the assessment and determination stages.

The Audit Office of New South Wales previously considered local government development assessments in our 2019 performance audit: 'Development assessment: pre-lodgement and lodgement in Camden Council and Randwick City Council'.

Appendix one – Response from agencies

Appendix two – Council profile: Byron Shire Council

Appendix three – Council profile: Northern Beaches Council

Appendix four – Council profile: The Hills Shire Council

Appendix five – About the audit 

Appendix six – Performance auditing

 

Copyright notice

© Copyright reserved by the Audit Office of New South Wales. All rights reserved. No part of this publication may be reproduced without prior consent of the Audit Office of New South Wales. The Audit Office does not accept responsibility for loss or damage suffered by any person acting on or refraining from action as a result of any of this material.

 

Parliamentary reference - Report number #370 - released 12 December 2022

 

Published

Actions for Audit Insights 2018-2022

Audit Insights 2018-2022

Community Services
Education
Environment
Finance
Health
Industry
Justice
Local Government
Premier and Cabinet
Planning
Transport
Treasury
Universities
Whole of Government
Asset valuation
Cross-agency collaboration
Compliance
Cyber security
Financial reporting
Fraud
Information technology
Infrastructure
Internal controls and governance
Management and administration
Procurement
Project management
Regulation
Risk
Service delivery
Shared services and collaboration
Workforce and capability

What the report is about

In this report, we have analysed the key findings and recommendations from our audit reports over the past four years.

This analysis includes financial audits, performance audits, and compliance audits of state and local government entities that were tabled in NSW Parliament between July 2018 and February 2022.

The report is framed by recognition that the past four years have seen significant challenges and emergency events.

The scale of government responses to these events has been wide-ranging, involving emergency response coordination, service delivery, governance and policy.

The report is a resource to support public sector agencies and local government to improve future programs and activities.

What we found

Our analysis of findings and recommendations is structured around six key themes:

  • Integrity and transparency
  • Performance and monitoring
  • Governance and oversight
  • Cyber security and data
  • System planning for disruption
  • Resource management.

The report draws from this analysis to present recommendations for elements of good practice that government agencies should consider in relation to these themes. It also includes relevant examples from recent audit reports.

In this report we particularly call out threats to the integrity of government systems, processes and governance arrangements.

The report highlights the need for balanced advice to government on options and risks, for transparent documentation and reporting of directions and decisions, and for early and open sharing of information with integrity bodies and audit.

A number of the matters highlighted in this report are similar to those described in our previous Insights Report, (Performance Audit Insights: key findings from 2014–2018) specifically in relation to cyber and information security, to performance measurement, reporting and evaluation, and system and workforce planning and capability.

Fast facts

  • 72 audits included in the Audit Insights 2018–2022 analysis
  • 4 years of audits tabled by the Auditor-General for New South Wales
  • 6 key themes for Audit Insights 2018–2022.

picture of Margaret Crawford Auditor-General for New South Wales in black dress with city skyline as backgroundI am pleased to present the Audit Insights 2018–2022 report. This report describes key findings, trends and lessons learned from the last four years of audit. It seeks to inform the New South Wales Parliament of key risks identified and to provide insights and suggestions to the agencies we audit to improve performance across the public sector.

The report is framed by a very clear recognition that governments have been responding to significant events, in number, character and scale, over recent years. Further, it acknowledges that public servants at both state and council levels generally bring their best selves to work and diligently strive to deliver great outcomes for citizens and communities. The role of audit in this context is to provide necessary assurance over government spending, programs and services, and make suggestions for continuous improvement.

A number of the matters highlighted in this report are similar to those described in our previous Insights Report, (Performance Audit Insights: key findings from 2014–2018) specifically in relation to cyber and information security, to performance measurement, reporting and evaluation, and system and workforce planning and capability.

However, in this report we particularly call out threats to the integrity of government systems, processes and governance arrangements. We highlight the need for balanced advice to government on options and risks, for transparent documentation and reporting of directions and decisions, and for early and open sharing of information with integrity bodies and audit. Arguably, these considerations are never more important than in an increasingly complex environment and in the face of significant emergency events and they will be key areas of focus in our future audit program.

While we have acknowledged the challenges of the last few years have required rapid responses to address the short-term impacts of emergency events, there is much to be learned to improve future programs. I trust that the insights developed in this report provide a helpful resource to public sector agencies and local government across New South Wales. I would be pleased to receive any feedback you may wish to offer.

Margaret Crawford
Auditor-General for New South Wales

Integrity and transparency Performance and monitoring Governance and oversight Cyber security and data System planning Resource management
Insufficient documentation of decisions reduces the ability to identify, or rule out, misconduct or corruption. Failure to apply lessons learned risks mistakes being repeated and undermines future decisions on the use of public funds. The control environment should be risk-based and keep pace with changes in the quantum and diversity of agency work. Building effective cyber resilience requires leadership and committed executive management, along with dedicated resourcing to build improvements in cyber security and culture. Priorities to meet forecast demand should incorporate regular assessment of need and any emerging risks or trends. Absence of an overarching strategy to guide decision-making results in project-by-project decisions lacking coordination. Governments must weigh up the cost of reliance on consultants at the expense of internal capability, and actively manage contracts and conflicts of interest.
Government entities should report to the public at both system and project level for transparency and accountability. Government activities benefit from a clear statement of objectives and associated performance measures to support systematic monitoring and reporting on outcomes and impact. Management of risk should include mechanisms to escalate risks, and action plans to mitigate risks with effective controls. In implementing strategies to mitigate cyber risk, agencies must set target cyber maturity levels, and document their acceptance of cyber risks consistent with their risk appetite. Service planning should establish future service offerings and service levels relative to current capacity, address risks to avoid or mitigate disruption of business and service delivery, and coordinate across other relevant plans and stakeholders. Negotiations on outsourced services and major transactions must maintain focus on integrity and seeking value for public funds.
Entities must provide balanced advice to decision-makers on the benefits and risks of investments. Benefits realisation should identify responsibility for benefits management, set baselines and targets for benefits, review during delivery, and evaluate costs and benefits post-delivery. Active review of policies and procedures in line with current business activities supports more effective risk management. Governments hold repositories of valuable data and data capabilities that should be leveraged and shared across government and non-government entities to improve strategic planning and forecasting. Formal structures and systems to facilitate coordination between agencies is critical to more efficient allocation of resources and to facilitate a timely response to unexpected events. Transformation programs can be improved by resourcing a program management office.
Clear guidelines and transparency of decisions are critical in distributing grant funding. Quality assurance should underpin key inputs that support performance monitoring and accounting judgements. Governance arrangements can enable input into key decisions from both government and non-government partners, and those with direct experience of complex issues.     Workforce planning should consider service continuity and ensure that specialist and targeted roles can be resourced and allocated to meet community need.
Governments must ensure timely and complete provision of information to support governance, integrity and audit processes.          
Read more Read more Read more Read more Read more Read more

 

This report brings together a summary of key findings arising from NSW Audit Office reports tabled in the New South Wales Parliament between July 2018 and February 2022. This includes analysis of financial audits, performance audits, and compliance audits tabled over this period.

  • Financial audits provide an independent opinion on the financial statements of NSW Government entities, universities and councils and identify whether they comply with accounting standards, relevant laws, regulations, and government directions.
  • Performance audits determine whether government entities carry out their activities effectively, are doing so economically and efficiently, and in accordance with relevant laws. The activities examined by a performance audit may include a selected program or service, all or part of an entity, or more than one government entity. Performance audits can consider issues which affect the whole state and/or the local government sectors.
  • Compliance audits and other assurance reviews are audits that assess whether specific legislation, directions, and regulations have been adhered to.

This report follows our earlier edition titled 'Performance Audit Insights: key findings from 2014–2018'. That report sought to highlight issues and themes emerging from performance audit findings, and to share lessons common across government. In this report, we have analysed the key findings and recommendations from our reports over the past four years. The full list of reports is included in Appendix 1. The analysis included findings and recommendations from 58 performance audits, as well as selected financial and compliance reports tabled between July 2018 and February 2022. The number of recommendations and key findings made across different areas of activity and the top issues are summarised at Exhibit 1.

The past four years have seen unprecedented challenges and several emergency events, and the scale of government responses to these events has been wide-ranging involving emergency response coordination, service delivery, governance and policy. While these emergencies are having a significant impact today, they are also likely to continue to have an impact into the future. There is much to learn from the response to those events that will help the government sector to prepare for and respond to future disruption. The following chapters bring together our recommendations for core elements of good practice across a number of areas of government activity, along with relevant examples from recent audit reports.

This 'Audit Insights 2018–2022' report does not make comparative analysis of trends in public sector performance since our 2018 Insights report, but instead highlights areas where government continues to face challenges, as well as new issues that our audits have identified since our 2018 report. We will continue to use the findings of our Insights analysis to shape our future audit priorities, in line with our purpose to help Parliament hold government accountable for its use of public resources in New South Wales.

Appendix one – Included reports, 2018–2022

Appendix two – About this report

 

Copyright notice

© Copyright reserved by the Audit Office of New South Wales. All rights reserved. No part of this publication may be reproduced without prior consent of the Audit Office of New South Wales. The Audit Office does not accept responsibility for loss or damage suffered by any person acting on or refraining from action as a result of any of this material.

Published

Actions for Universities 2021

Universities 2021

Universities
Cyber security
Financial reporting
Internal controls and governance

What the report is about

Results of the financial statement audits of the public universities in NSW for the year ended 31 December 2021.

What we found

Financial reporting

Unmodified audit opinions were issued for all ten universities.

The University of Wollongong reported the retrospective correction of a prior period error relating to a $169 million contract termination liability.

All universities reported positive net results in 2021 (four in 2020) and each showed improvement from 2020. This was mainly due to expenditure decreasing by a combined $644 million (5.8%) from 2020. Universities implemented redundancy programs in response to the COVID-19 pandemic, which resulted in a decrease of nearly 2,300 full-time equivalent staff in 2021.

All universities held an investment in Education Australia Limited, which paid to its shareholders a fully franked dividend comprising cash and shares in IDP Education Limited. This increased the combined investment revenues of the universities by $515 million in 2021. However, it affected each university's net result differently depending on elections made in their historical accounting treatment.

Government grants increased by $442 million from 2020, of which $297 million related to the Commonwealth's 2021 additional Research Support Program funding to the NSW universities which was a COVID-19 support measure to the sector.

Over 43% of universities' course fees revenue comes from three countries (39% in 2020). Students from China now represent over half of all overseas student enrolments. A high level of reliance on student revenue from a single country poses a concentration risk for universities.

Internal controls

We reported 105 findings to universities on internal control deficiencies (110 in 2020).

Four high-risk findings were identified (three in 2020), relating to:

  • the status of one university's work in assessing its liability for underpayment of staff
  • IT control deficiencies over privileged user access
  • control deficiencies that resulted in non-recognition of a liability in one university's prior year's financial statements
  • a detailed review of payroll compliance for casual staff, which remains outstanding at one university.

There were 45 repeat findings of control deficiencies in 2021 (45 in 2020). 

All universities have drafted or implemented a cybersecurity policy and established a governance committee accountable for cybersecurity. However, improvements could be made in:

  • recording and monitoring of attempted cyber incidents
  • assessing cyber risks relating to IT vendors
  • implementation of cybersecurity control measures for key systems. 

Four out of 13 entities experienced a significant cyber incident during 2021. 

What we recommended

  • Universities should prioritise actions to address repeat findings on internal control deficiencies, particularly where the issue has been repeated for a number of years.
  • Universities and controlled entities should prioritise improvements to their cybersecurity and resilience.

Fast facts

There are ten public universities in NSW, with 52 controlled entities in Australia and 22 overseas controlled entities.

  • $12b total combined adjusted revenue in 2021, an increase of $1.1 billion (10.5%) from 2020
  • $10.4b total combined expenditure in 2021, a decrease of $644 million (5.8%) from 2020
  • 79,134 overseas student enrolments in 2021, a decrease of 3,138 students (3.8%) from 2020
  • 209,018 domestic student enrolments in 2021, an increase of 1,622 students (0.8%) from 2020
  • 4 high-risk management letter findings were identified (3 in 2020) 
  • 43% of reported issues were repeat issues. 

This report provides Parliament with the results of our financial audits of universities in New South Wales and their controlled entities in 2021, including our analysis, observations and recommendations in the following areas:

  • financial reporting
  • internal controls and governance
  • teaching and research.

Financial reporting is an important element of governance. Confidence and transparency in university sector decision-making are enhanced when financial reporting is accurate and timely.

This chapter outlines our audit observations on the financial reporting of universities in NSW for 2021.

Section highlights
  • The 2021 financial statements of all ten universities received unmodified audit opinions.
  • All universities reported positive net results in 2021 and all showed improvement from 2020 results.
  • The change in universities' investments in Education Australia Limited resulted in a combined increase of $515 million in investment revenue. However, it affected each university's net result differently depending on elections made in their historical accounting treatment.
  • Forty-three per cent of universities' course fees revenue comes from three countries (up from 39% in 2020). Students from China now represent over half of all overseas student enrolments.

Appropriate and robust internal controls help produce reliable financial reports and reduce risks associated with managing finances, compliance and administration of universities.

This chapter outlines the internal controls related observations and insights across universities in NSW for 2021, including overall trends in findings, level of risk and implications.

Our audits do not review all aspects of internal controls and governance every year. The more significant issues and risks are included in this chapter. These along with the less significant matters are reported to universities for management to address.

Section highlights
  • The total number of internal control findings decreased from 110 in 2020 to 105 in 2021.
  • Four high-risk findings were identified in 2021 (three in 2020).
  • The number of repeat deficiencies remained the same with 45 reported in 2021 and 2020.
  • All entities have drafted or implemented a cybersecurity policy/framework and established a governance committee accountable for cybersecurity.
  • Four out of 13 entities experienced a significant cyber incident during 2021.

Universities' primary objectives are teaching and research. They invest most of their resources aiming to achieve quality outcomes in academia and student experience. Universities have committed to achieving certain government targets and compete to advance their reputation and their standing in international and Australian rankings.

This chapter outlines teaching and research outcomes for universities in NSW for 2021.

Section highlights
  • Seven universities were reported as having full-time employment rates of their undergraduates in 2021 that were greater than the national average.
  • Enrolments at universities in NSW decreased the most in Management and Commerce courses. The largest increase in enrolments was in Science courses.
  • On average, universities delivered 59% of their courses primarily through online means in 2021.
  • Five universities in 2020 were reported as meeting the target enrolment rate for students from low socio-economic status (SES) backgrounds.

Appendix one – List of 2021 recommendations

Appendix two – Status of 2020 recommendations

Appendix three – Universities' controlled entities

 

Copyright notice

© Copyright reserved by the Audit Office of New South Wales. All rights reserved. No part of this publication may be reproduced without prior consent of the Audit Office of New South Wales. The Audit Office does not accept responsibility for loss or damage suffered by any person acting on or refraining from action as a result of any of this material.

Published

Actions for Local Government 2021

Local Government 2021

Local Government
Asset valuation
Cyber security
Financial reporting
Information technology

What the report is about

Results of the local government sector council financial statement audits for the year ended 30 June 2021.

What we found

Unqualified audit opinions were issued for 126 councils, 13 joint organisation audits and nine county councils in 2020–21. 

A qualified audit opinion was issued for Central Coast Council who was unable to provide evidence to support the carrying value of $5.5 billion of roads, bridges, footpaths, bulk earthworks, stormwater drainage, water supply and sewerage network assets.

The audit of Kiama Municipal Council is still in progress as at the date of this report due to significant accounting issues not resolved resulting in corrections to the financial statements and prior period errors.

Forty-one councils and joint organisations (2020: 16) received extensions to submit audited financial statements to the Office of Local Government (OLG). 

Councils were impacted by recent emergency events, including bushfires, floods and the COVID-19 pandemic. The financial implications from these events varied across councils. Councils adapted systems, processes and controls to enable staff to work flexibly.

What the key issues were

There were 1,277 audit findings reported to councils in audit management letters.

Ninety-two high-risk matters were identified across the sector:

  • 69 high-risk matters relating to asset management (see page 30)
  • six high-risk matters relating to information technology (see page 39)
  • six high-risk matters relating to financial reporting (see page 26)
  • six high-risk matters to council governance procedures (see page 22)
  • five high-risk matters relating to financial accounting (see page 28).

More needs to be done to reduce the number of errors identified in financial reports. Twenty-nine councils required material adjustments to correct errors in previous audited financial statements.

Rural firefighting equipment

Sixty-eight councils did not record rural firefighting equipment estimated to be $145 million in their financial statements.

The financial statements of the NSW Total State Sector and the NSW Rural Fire Service do not include these assets, as the State is of the view that rural firefighting equipment that has been vested to councils under the Rural Fires Act 1997 is not controlled by the State. In reaching this conclusion, the State argued that on balance it would appear the councils control rural firefighting equipment that has been vested to them.

The continued non-recording of rural firefighting equipment in financial management systems of some councils increases the risk that these assets are not properly maintained and managed.

What we recommended

Councils should perform a full asset stocktake of rural firefighting equipment, including a condition assessment for 30 June 2022 financial reporting purposes and recognise this equipment as assets in their financial statements. 

Consistent with OLG’s role to assess council’s compliance with legislative responsibilities, standards or guidelines, OLG should intervene where councils do not recognise rural firefighting equipment.

Fast facts

  • 150 councils and joint organisations in the sector
  • 99% unqualified audit opinions issued for the 30 June 2021 financial statements
  • 489 monetary misstatements reported in 2020–21
  • 54 prior period errors reported
  • 92 high-risk management letter findings identified
  • 53% of reported issues were repeat issues.

Early financial reporting procedures

Fifty-nine per cent of councils performed some early financial reporting procedures, less than the prior year.

What we recommended

OLG should require early financial reporting procedures across the local government sector by April 2023. Policy requirements should be discussed with key stakeholders to ensure benefits of the procedures are realised.

Asset valuations

Audit management letters reported 288 findings relating to asset management. Fifty-eight councils had deficiencies in their processes to revalue infrastructure assets.

Thirty-five councils corrected errors relating to revaluations amounting to $1 billion and 13 councils had prior period errors relating to asset revaluations that amounted to $253 million.

What we recommended

Councils should have all asset revaluations completed by April of the financial year subject to audit.

Integrity/completeness of asset records

Sixty-seven councils had weak processes over maintenance, completeness and security of fixed asset registers.

Thirty-five councils corrected errors to the financial statements relating to poor record keeping of asset data that amounted to $102.1 million. Nineteen councils had 27 prior period financial statement errors that amounted to $417.1 million relating to the quality of asset records such as found and duplicate assets.

What we recommended

Councils need to improve controls and processes to ensure integrity and completeness of asset source records.

Cybersecurity

Our audits found that cybersecurity frameworks and related controls were not in place at 65 councils.

These councils have yet to implement basic governance and internal controls to manage cybersecurity such as having a cybersecurity framework, policy and procedure, register of cyber incidents, system penetrations testing and training.

What we recommended

OLG needs to develop a cybersecurity policy to be applied by councils as a matter of high priority in order to ensure cybersecurity risks over key data and IT assets are appropriately managed across councils and key data is safeguarded.

Councils should monitor the implementation of recommendations

Fifty-three per cent of total findings reported in 2020–21 audit management letters were repeat or partial repeat findings from prior years.

What we recommended

Councils and those charged with governance should track the progress of implementing recommendations from financial audits, performance audits and public inquiries.

Key financial information

In 2020–21, councils:

  • collected $7.6b in rates and annual charges
  • received $5.1b in grants and contributions
  • incurred $4.8b of employee benefits and on costs
  • held $15.3b of cash and investments
  • managed $161.7b of infrastructure, property, plant and equipment
  • entered into $3.4b of borrowings.

Pursuant to the Local Government Act 1993 I present my report Local Government 2021. My report provides the results of the 2020–21 financial audits of 127 councils, 13 joint organisations and nine county councils.

Unqualified audit opinions were issued for 126 councils, 13 joint organisation and nine county councils in 2020–21. My independent auditor’s opinion was qualified for Central Coast Council who was unable to provide evidence to support the carrying value of $5.5 billion of roads, bridges, footpaths, bulk earthworks, stormwater drainage, water supply and sewerage network assets.

The 2020–21 year was challenging from many perspectives, not least being the continuing impact of and response to the recent emergency events, including bushfires, floods and the COVID-19 pandemic. We appreciate the efforts of council staff and management right across local government and they must be congratulated for their responsiveness and resilience in meeting their financial reporting obligations in such challenging circumstances.

This report makes a number of recommendations to councils and to the regulator, the Office of Local Government within the Department of Planning and Environment. These are intended to support councils to further improve the timeliness, accuracy and strength of financial reporting and their governance arrangements. Arguably, when faced with challenges, it is even more important to prioritise and invest in systems and processes to protect the integrity of councils' operations and promote accurate and transparent reporting.

I look forward to continuing engagement and constructive dialogue with councils in 2022–23 and beyond.

Margaret Crawford
Auditor-General for New South Wales

Financial reporting is an important element of good governance. Confidence in and transparency of public sector decision-making are enhanced when financial reporting is accurate and timely.

This chapter outlines audit observations related to the financial reporting of councils and joint organisations.

Highlights

  • One hundred and nine councils and joint organisations (2020: 133) lodged audited financial statements with OLG by the statutory deadline of 31 October (2020: 30 November).
  • Forty-one councils and joint organisations (2020: 16) received extensions to submit audited financial statements to OLG.
  • Unqualified audit opinions were issued for 126 councils, 13 joint organisations and nine county councils in 2020–21. A qualified audit opinion was issued for Central Coast Council in both 2019–20 and 2020–21.
  • The audit of Kiama Municipal Council is still in progress as at the date of this report due to significant accounting issues.
  • Fifty-nine per cent of councils performed some early financial reporting procedures, less than the prior year. We recommended that OLG should require early close procedures across the local government sector by 30 April 2023.
  • The total number and dollar value of corrected financial statement errors increased compared with the prior year, however uncorrected financial statement errors and prior period financial statement errors decreased compared to the prior year.
  • Sixty-eight councils (2020: 68 councils) did not record rural firefighting equipment in their financial statements worth an estimated $145 million (2020: $119 million). The NSW Government has confirmed these assets are not controlled by the NSW Rural Fire Service and are not recognised in the financial records of the NSW Government. We recommended that consistent with the OLG's role to assess council’s compliance with legislative responsibilities, standards or guidelines, OLG should intervene where councils do not recognise rural firefighting equipment. Councils should perform a full asset stocktake of rural firefighting equipment, including a condition assessment for 30 June 2022 financial reporting purposes.

A strong system of internal controls enables councils to operate effectively and efficiently, produce reliable financial reports, comply with laws and regulations, and support ethical government.

This chapter outlines the overall trends in governance and internal control findings across councils, county councils and joint organisations in 2020–21.

Financial audits focus on key governance matters and internal controls supporting the preparation of councils' financial statements. Audit findings are reported to management and those charged with governance through audit management letters.

Highlights

  • Total number of audit findings reported in audit management letters decreased from 1,435 in 2019–20 to 1,277 in 2020–21.
  • No extreme risk audit findings were identified in 2020–21 (2019–20: 1).
  • Total number of high-risk audit findings increased from 53 in 2019–20 to 92 in 2020–21. Sixty of the high-risk findings in 2020–21 related to the non-recording of rural firefighting equipment in councils' financial statements. Twenty-six per cent of the high-risk findings identified in 2019–20 were reported as high-risk findings in 2020–21.
  • Fifty-three per cent of findings reported in audit management letters were repeat or partial repeat findings. We recommend councils and those charged with governance should track progress of implementing recommendation from our audits.
  • Governance, asset management and information technology comprise over 62% of findings and continue to be key areas requiring improvement.
  • A number of recommendations were made relating to asset valuations and integrity of asset data records, in response to the findings that:
    • 67 councils had weak processes over maintenance and security of fixed asset registers
    • 58 councils had deficiencies in their processes to revalue infrastructure assets.
  • Sixty-five councils have yet to implement basic governance and internal controls to manage cybersecurity. We recommended that OLG needs to develop a cybersecurity policy to be applied by councils as a matter of high priority.

Total number of findings reported in audit management letters decreased

In 2020–21, 1,277 audit findings were reported in audit management letters (2019–20: 1,435 findings). No extreme audit risk findings were identified this year. The extreme risk relating to Central Coast Council's use of externally restricted funds in 2019–20 was partially addressed by management and has been rated as a high-risk for 2020–21. The total number of high-risk findings increased to 92 (2019–20: 53 high-risk findings).

Findings are classified as new, repeat or ongoing, based on:

  • new findings were first reported in 2020–21 audits
  • repeat findings were first reported in prior year audits, but remain unresolved in 2020–21
  • ongoing findings were first reported in prior year audits, but the action due dates to address the findings are after 2020–21.

Findings are categorised as governance, financial reporting, financial accounting, asset management, purchases and payables, payroll, cash and banking, revenue and receivables, or information technology. The high-risk and common audit findings across these areas are explored further in this chapter.

Audit Office’s annual work program for 2021–22 onwards

Focus on integrity of systems, good governance and good advice

We have a fundamental role in helping the Parliament hold government accountable for the use of public resources. In doing so, we examine whether councils' systems and processes are effective in supporting integrity, accountability and transparency. Key aspects of integrity that we expect to through conduct of our financial and performance audits over the next three years include the integrity of systems, good governance and good advice. These focus areas have arisen from the collation of key findings and recommendations from our past reports.

Focus on local councils' continued response to recent emergencies

The COVID-19 pandemic continues to have a significant impact on the people and the public sector of New South Wales. Local councils are continuing to assist communities in their recovery from the 2019–20 bushfires and subsequent and recent flooding. The full extent of some of these events remain unclear and will likely continue to have an impact into the future.

Image of a bus stop that's been completely burned because of a bushfire

The Office of Local Government within the Department of Planning and Environment continues to work with other state agencies to assist local councils and their communities to recover from these unprecedented events.

The increasing and changing risk environment presented by these events has meant that we have recalibrated and focused our efforts on providing assurance on how effectively aspects of responses to these emergencies have been delivered.

This includes financial and governance risks arising from the scale and complexity of government responses to these events.

We will take a phased approach to ensure our financial and performance audits address the following elements of the emergencies and the Local Government's responses:

  • local councils' planning and preparedness for emergencies
  • local councils' initial responses to support people and communities impacted by COVID-19 and the 2019–20 bushfires and recent floods
  • governance and oversight risks that arise from the need for quick decision-making and responsiveness to emergencies
  • effectiveness and robustness of processes to direct resources toward recovery efforts and ensure good governance and transparency in doing so
  • the mid to long-term impact of government responses to the natural disasters and COVID-19
  • whether government investment has achieved desired outcomes.

Focus on the effectiveness of cybersecurity in local government

The increasing global interconnectivity between computer networks has dramatically increased the risk of cybersecurity incidents. Such incidents can harm local government service delivery and may include theft of information, denial of access to critical technology, or even hijacking of systems for profit or malicious intent.

Outdated IT systems and capability present risks to government cybersecurity. Local councils need to be alert to the need to update and replace legacy systems, and regularly train and upskill staff in their use. To add to this, cybersecurity risks have been exacerbated by recent emergencies, which have resulted in greater and more diverse use of digital technology.

Our approach to auditing cybersecurity across in the sector involves:

  • considering how local councils are responding to the risks associated with cybersecurity across our financial audits
  • examining the effectiveness of cybersecurity planning and governance arrangements within local councils
  • conducting deep-dive performance audits of the effectiveness of cybersecurity measures in selected councils.

Local government elections

Local government elections took place in 2021–22

The local government elections were deferred for one year due to the COVID-19 pandemic and were held on 4 December 2021.

As part of our audits, we will consider the impact of any significant change on key decisions and activities for councils, county councils and joint organisations following the local government elections.

New rate peg methodology to support growing councils

The Independent Pricing and Regulatory Tribunal (IPART) has completed its review of the local government rate peg methodology to include population growth.

On 10 September 2021, IPART provided the final report on this review to the Minister for Local Government.

The minister has endorsed the new rate peg methodology and has asked IPART to give effect to it in setting the rate peg from the 2022–23 financial year.

As part of our audits, we will consider the impact of these changes on the financial statements and on key decisions and activities for councils, county councils and joint organisations.

Appendix one – Response from the Office of Local Government within the Department of Planning and Environment

Appendix two – Status of previous recommendations

Appendix three – Status of audits

 

Copyright notice

© Copyright reserved by the Audit Office of New South Wales. All rights reserved. No part of this publication may be reproduced without prior consent of the Audit Office of New South Wales. The Audit Office does not accept responsibility for loss or damage suffered by any person acting on or refraining from action as a result of any of this material.

Published

Actions for Transport 2021

Transport 2021

Transport
Asset valuation
Compliance
Financial reporting
Information technology
Infrastructure
Internal controls and governance

What the report is about

The results of the Transport cluster agencies’ financial statement audits for the year ended 30 June 2021.

What we found

Unmodified financial statement audit opinions were issued for all Transport cluster agencies. Resolution of issues delayed signing the Transport Asset Holding Entity of NSW (TAHE) until 24 December 2021. Matters relating to TAHE are also reported in the report on State Finances 2021.

Emphasis of Matter - TAHE

An Emphasis of Matter paragraph was included in TAHE's audit opinion to draw attention to uncertainty associated with:

  • future access and licence fees that are subject to re-signed agreements
  • an additional $4.1 billion of funding that is outside the forward estimates period
  • a significant portion of the fair value of TAHE’s non-financial assets is reflected in the terminal value, which is outside the ten-year contract period to 30 June 2031, and the risk that TAHE will not be able to negotiate contract terms to support current projections.

TAHE's transition from RailCorp also changed its valuation of assets to an income approach, resulting in a $20.3 billion decrease to the fair value. The fair value decrease was because the cash flows were not sufficient to support the previous recorded value.

TAHE corrected a misstatement of $1.2 billion relating to the valuation of its assets. This followed significant deliberation on key judgements and assumptions, with TAHE adopting risk assumptions in its valuation that were not in line with comparable benchmarks.

Emphasis of Matter - State Transit Authority of New South Wales

An Emphasis of Matter paragraph was included in the State Transit Authority of NSW's (the Authority) audit opinion to draw attention to the financial statements not prepared on a going concern basis. This was because the NSW Government put the Authority's bus contracts out to competitive tender and accordingly, management assessed the Authority's principal activities are not expected to operate for a full 12 months after 30 June 2021.

The implementation of AASB 1059 ‘Service Concession Arrangements: Grantors’ resulted in a net increase in assets of $23.5 billion across the Transport cluster.

The 2020–21 audits identified six high-risk and 45 moderate risk issues across the cluster. Fourteen of the moderate risk issues were repeat issues, including information technology controls around management of user access for key financial systems and payroll processes.

The high-risk issues, in addition to those related to TAHE and previously reported in the report on State Finances 2021, include:

  • absence of conflict of declarations related to land acquisition processes at Transport for NSW
  • no evidence of conflict of interest declarations obtained by TAHE from consultants and contractors regarding involvement in other engagements.

What we recommended

TAHE needs to:

  • finalise revised commercial agreements to reflect fees detailed in a Heads of Agreement signed on 18 December 2021
  • prepare robust projections and business plans to support the required rate of return.

NSW Treasury and TAHE should monitor the risk that control of TAHE assets could change in the future.

Transport for NSW needs to significantly improve its processes to ensure all key information is identified and shared with the Audit Office.

Transport agencies should implement a process to ensure conflicts of interest declarations are completed for land acquisitions and applied consistently across the cluster.

Transport agencies should implement a process to capture all contracts and agreements entered to ensure:

  • agencies are aware of contractual obligations
  • financial reporting implications are assessed, particularly with respect to leases, revenue and service concession arrangements.

Fast facts

The Transport cluster plans and delivers infrastructure and integrated services across all modes of transport. This includes road, rail, bus, ferry, light rail, cycling and walking. There are 11 agencies in the cluster.

  • $128b road and maritime system infrastructure assets as at 30 June 2021
  • 100% unqualified audit opinions were issued on agencies 30 June 2021 financial statements
  • 26 monetary misstatements were reported in 2020–21
  • $24.9b rail systems infrastructure assets as at 30 June 2021
  • high-risk management letter findings were identified
  • 37% of reported issues were repeat issues

 

This report provides Parliament and other users of the transport cluster (the cluster) agencies’ financial statements with the results of our audits, our observations, analysis, conclusions and recommendations in the following areas:

  • financial reporting
  • audit observations.

Financial reporting is an important element of good governance. Confidence and transparency in public sector decision making are enhanced when financial reporting is accurate and timely.

This chapter outlines our audit observations related to the financial reporting of agencies in the cluster for 2021.

Section highlights

  • Unqualified audit opinions were issued on all Transport agencies' financial statements.
  • An 'Emphasis of Matter' paragraph was included in the Transport Asset Holding Entity of New South Wales' (TAHE) Independent Auditor's Report to draw attention to significant uncertainty associated with the judgements, estimates and assumptions supporting the valuation of TAHE’s property, plant and equipment (PPE) and intangible assets.
  • In 2020–21, the former RailCorp transitioned to TAHE, a for-profit state-owned corporation. When TAHE became a for-profit entity, it was required to change its valuation approach. The value of a for-profit entity's assets cannot exceed the cash flows they might realise either through their sale or continued use. This change in the basis of valuation resulted in a decrease of $20.3 billion in the fair value of the assets. The decrease in fair value was because the cash flows, which support measurement under the income approach, were insufficient to support the previous valuation based on the current replacement cost of those assets.
  • TAHE also corrected a misstatement of $1.2 billion relating to the valuation of its assets after significant deliberation on key judgements and assumptions, with TAHE adopting higher risk assumptions in its valuation when compared to the relevant market benchmarks.
  • On 18 December 2021, a Heads of Agreement (HoA) was signed between TAHE, Transport for NSW, Sydney Trains and NSW Trains. This HoA reflected TAHE's intention to negotiate higher access and licence fees in order to meet the shareholding ministers' revised expectation of a higher rate of return. This matter resolved the treatment of a significant accounting issue in the State’s consolidated (whole-of-government) financial statements. Refer to the Report on State Finances tabled on 9 February 2022. The expectation of an additional $5.2 billion in fees added to the valuation of TAHE's PPE and intangibles, with a final value of $17.15 billion.
  • The implementation of AASB 1059 ‘Service Concession Arrangements: Grantors’ resulted in a net increase in assets of $23.5 billion across the cluster. AASB 1059 had a significant impact on Transport for NSW, Sydney Metro, Sydney Ferries and TAHE's 2020–21 financial statements.
  • TAHE corrected a misstatement of $97.2 million relating to the application of AASB 1059 'Service Concession Arrangements: Grantors' for the Airport Link Company Contract. 

Appropriate financial controls help ensure the efficient and effective use of resources and administration of agency policies. They are essential for quality and timely decision making.

This chapter outlines our observations and insights from our financial statement audits of agencies in the cluster.

Section highlights

  • The number of findings reported to management increased from 56 in 2019–20 to 73 in 2020–21.
  • Thirty-seven per cent were repeat findings. Many repeat issues related to information technology controls around user access management and payroll processes. These included deficiencies in the monitoring of privileged user access to key financial systems, review of user access to key financial systems and segregation of duties between preparer and reviewer for new employee hires.
  • Six new high-risk issues were identified in 2020–21, an increase of three compared to last year.
  • One high-risk issue related to conflicts of interests not being declared by all officers involved in the land acquisition process at Transport for NSW.
  • Five high-risk issues arose from the audit of TAHE, with respect to:
    • control over TAHE assets and operations
    • asset valuations
    • access price build up
    • detailed business modelling to support returns
    • conflict of interest management.
  • Based on the access and licence agreements signed at 30 June 2021 between TAHE, Sydney Trains and NSW Trains, our review of the expected returns calculated by NSW Treasury did not support the assumption that there was a reasonable expectation that a sufficient rate of return could be achieved from the NSW Government's investment in TAHE.
  • On 14 December 2021 the shareholding ministers' increased their expectations as to TAHE's target average return from 1.5 per cent to the expected long-term inflation rate of 2.5 per cent.
  • On 18 December 2021 the revised shareholder expectations were confirmed in a signed Heads of Agreement. The Heads of Agreement will increase access fees paid by rail operators to TAHE by $5.2 billion.
  • TAHE's access and licence agreements specified fees that were well short of the IPART regulated maximum (ceiling price).
  • The finalisation of the access and licence agreements with Sydney Trains and NSW Trains resulted in a significant write-down of TAHE's asset value by $20.3 billion. The revaluation loss will need to be recovered as part of the shareholders’ rate of return of 2.5 per cent in order to sustain the whole-of-government accounting treatment of cash contributions recorded as an equity contribution and not a grant expense.
  • There was a significant adjustment to TAHE’s valuation between the financial statements originally submitted for the audit and the final, signed financial statements due to differences in risk assumptions resulting in a correction of a $1.2 billion misstatement. 

Findings reported to management

The number of findings reported to management has increased, and 37 per cent of all issues were repeat issues

Breakdowns and weaknesses in internal controls increase the risk of fraud and error. Deficiencies in internal controls, matters of governance interest and unresolved issues were reported to management and those charged with governance of agencies. The Audit Office does this through management letters, which include observations, related implications, recommendations and risk ratings.

In 2020–21, there were 73 findings raised across the cluster (56 in 2019–20) and 37 per cent of all issues were repeat issues (43 per cent in 2019–20).

In view of the recent performance audit ‘Managing Cyber Risks’ and compliance audit ‘Compliance with the NSW Cyber Security Policy’ involving the cluster, it is noted with concern that the most common repeat issues related to weaknesses in controls over information technology user access administration and password management. Moderate risk issues included completeness and accuracy of contract registers, accounting for assets and management of supplier and payroll masterfiles.

A delay in implementing audit recommendations increases the risk of intentional and accidental errors in processing information, producing management reports, and generating financial statements. This can impair decision-making, affect service delivery and expose agencies to fraud, financial loss and reputational damage. Control deficiencies may also mean agency staff are less likely to follow internal policies, inadvertently causing the agency not to comply with legislation, regulation, and central agency policies.

The table below describes the common issues identified across the cluster by category and risk rating. 

Risk rating Issue
Information technology
Moderate: 7 new, 4 repeat**

The financial audits identified opportunities for agencies to improve information technology processes and controls that support the integrity of financial data used to prepare agencies' financial statements. Of particular concern are issues associated with:

  • monitoring of privileged user access
  • user access management
  • password configuration management.
Low: 4 new, 1 repeat***
Internal control deficiencies or improvements
High: 1 new*

The financial audits identified internal control deficiencies across key business processes, including:

  • declarations of conflicts of interest over land acquisitions (see further details below)
  • management of contracts and agreement register
  • accounting for assets
  • management of payroll and supplier masterfiles
  • payroll processes.
Moderate: 15 new, 8 repeat**
Low: 2 new, 5 repeat***
Financial reporting
High: 3 new*

The financial audits identified opportunities for agencies to strengthen financial reporting, including:

  • asset valuations (see further details below)
  • detailed business modelling to support returns (see further details below)
  • access price build-up (see further details below)
  • timely capitalisation of completed assets.
Moderate: 3 new, 1 repeat**
Low: 2 new***
Governance and oversight
High: 1 new*

The financial audits identified opportunities for agencies to improve governance and oversight processes, including:

  • control over TAHE assets and operations
  • governance over Cyber Security.
Moderate: 2 new**
Non-compliance with key legislation and/or central agency policies
High: 1 new*

The financial audits identified the need for agencies to improve its compliance with key legislation and central agency policies, including:

  • conflict of interest (COI) management
  • outdated policies and procedures
  • incomplete probation procedures.
Moderate: 4 new, 1 repeat**
Low: 1 new, 7 repeat***

* High-risk from the consequence and/or likelihood of an event that has had, or may have a negative impact on the entity.
** Moderate risk from the consequence and/or likelihood of an event that has had, or may have a negative impact on the entity.
*** Low risk from the consequence and/or likelihood of an event that has had, or may have a negative impact on the entity.
Note: Management letter findings are based either on final management letters issued to agencies.

2020–21 audits identified six high-risk findings

High-risk findings were reported at the following cluster agencies.

Agency Description
2020–21 findings
Transport for NSW (new finding)

Declaration of conflicts of interest in the land acquisition process

In 2021, we conducted a performance audit over the Acquisition of 4–6 Grand Avenue, Camellia which examined:

  • whether Transport for NSW conducted an effective process to purchase 4–6 Grand Avenue, Camellia
  • whether Transport for NSW has effective processes and procedures to identify and acquire property required to deliver the NSW Government’s major infrastructure projects.

The report made several recommendations over Transport for NSW’s internal policies and procedures to guide the land acquisition process. As part of the financial audit, we obtained an understanding of key controls and processes relating to the acquisition of land, relevant to the audit of the financial statements. We found that conflicts of interests were not always declared by all officers involved in the land acquisition process. Furthermore, processes for declaring conflicts of interests are not consistently applied across cluster agencies.

Out of a sample of 19 land acquisitions tested, we identified:

  • 14 instances where there was no evidence of declarations of conflicts of interests made by the team members involved in the acquisition process
  • 2 instances where conflicts of interest declarations were completed by key members of the acquisition team only at a project level
  • 1 instance where conflicts of interest declarations were only completed by the property negotiator and the valuer, but not the other members of the acquisition team.

Management advised that the land acquisition processes, at the time of the land acquisitions, did not require formal conflicts of interests to be declared as they believe that as per Transport for NSW code of conduct, declaration is only required where the staff member considers that a potential or perceived Conflict of Interest exists. However, Transport for NSW's Procurement Policy requires the documentation of formal declarations from all staff involved in procurement activities to formally disclose any conflicts of interest or state that they do not have a conflict of interest.

This matter has been included as a high-risk finding in the management letter as absence of rigorous and consistent management of conflicts of interests, and non-compliance with established policies increases the risk that Transport for NSW may be exposed to reputational damage or financial losses in relation to land acquisitions. Furthermore, this may result in lack of probity or value-for money considerations during the land acquisition process.

Further details are elaborated below under 'Land acquisitions'.

Transport Asset Holding Entity of New South Wales (new finding)

Control over TAHE assets and operations

The State-Owned Corporations Act 1989 maintains that all decisions relating to the operation of a statutory state-owned corporation (SOC) are to be made by or under the authority of the board. However, under the Transport Administration Act 1988 (TAA), the functions of TAHE may only be exercised under one or more operating licences issued by the portfolio minister. The current Operating Licence confers terms and conditions for TAHE to carry out its functions, and imposes constraints on TAHE, including (but not limited to):

  • railway operations not permitted
  • transport services not permitted
  • TAHE must not carry out maintenance of its assets.

Such operating licences are short term in nature, and the TAA allows the transport minister (portfolio minister) to grant one or more operating licences to TAHE and may amend, substitute, or impose, amend or revoke conditions of the operating licence.

For the current year, the legal form of the arrangements established in its first year of operation imply TAHE has control over the assets based on the Implementation Deed and the agreements signed with the public operators.

However, risks remain as TAHE is in its early stages, and the actual substance of operations will need to be observed and considered.

Given the restrictions that can be placed on the entity through the Operating Licence, and the ability to make further changes to the Operating Licence and Statement of Expectations set by the portfolio minister, there is a risk there could be limitations placed on the Board of Directors to operate with sufficient independence in its decision-making with respect to the operations of TAHE. Over time, this may further impact the degree of control required by TAHE to satisfy the recognition criteria over its assets. It may also fundamentally change the presentation of TAHE’s financial statements.

Future limitations to the degree of control TAHE, and its Board, can exercise over its functions may impact the degree of control TAHE has over its assets going forward. As part of the 2021–22 audit, we will monitor and assess whether, in substance, these assets continue to be controlled by TAHE and whether, in substance, TAHE can operate as an independent SOC. We require management continue to demonstrate that TAHE continues to maintain control over its assets and has the ability to operate as an independent SOC. Further details are described below under 'Transport Asset Holding Entity'.

Transport Asset Holding Entity of New South Wales (new finding)

Asset valuation

The final updated valuation was based on cash flows that were in a signed Heads of Agreement, which stated that it set out the proposed indicative future access and licence fees which will form the basis of the negotiations between TAHE, Transport for NSW, Sydney Trains and NSW Trains, who will work together to review access fees and licence fees payable under the agreements and to make all necessary changes to the Operating Agreements by 1 July 2022.

This adds uncertainty in the cash flows. It is crucial that TAHE formalises these updated fees in legally binding signed access and licence agreements with the relevant parties as soon as possible.

Refer below for further details on the Heads of Agreement.

Transport Asset Holding Entity of New South Wales (new finding)

Conflict of interest (COI) management

For procurement transactions through direct negotiation with single quotes, there was no evidence of COI declarations obtained from the consultants and contractors regarding involvement in other engagements. Contractors and consultants are required to declare actual COI. However, there was no requirement to confirm nil conflict of interest. In addition, there is a risk that perceived COI may not be adequately assessed or managed. TAHE is expected to operate as an independent SOC and would need to ensure any perceived or actual conflict of interest is adequately addressed.

Management should implement a process to:

  • ensure conflicts of interest declarations are completed when engaging all consultants and contractors (including involvement with other engagements and confirmation of nil conflicts of interests)
  • ensure probity is undertaken to identify any actual or perceived conflicts of interest.

The declarations should consider individuals and relationships that may create, or may be perceived to create, conflicts of interest.

Transport Asset Holding Entity of New South Wales (new finding)

Detailed business modelling to support returns

On 18 December 2021, Transport for NSW, TAHE and the operators, Sydney Trains and NSW Trains entered into a Heads of Agreement (HoA). This HoA forms the basis of negotiations to revise the pricing within the existing 10-year contracts and deliver upon the shareholders' expectation of a return of 2.5 per cent per annum of contributed equity, including recovering the revaluation loss incurred in 2020–21.

TAHE needs to revise its business plan and include detailed business modelling that supports the shareholding ministers' revised expectations of return (2.5 per cent return on the State’s equity injections and recovery of the write-down of assets over the average useful life of those assets) and align the business plan and Statement of Corporate Intent. This requires more detailed projections, estimates and plans that support how TAHE expects to recover the asset write-down and expected returns to government. The current modelling for ten years needs to be enhanced with modelling over the expected recovery period of approximately 33 years.

Transport Asset Holding Entity of New South Wales (new finding)

Access price build-up

Management explained that in determining access and licence fees for the agreements with Sydney Trains and NSW Trains, assets prior to the commencement of equity injections in 2015–16 were excluded from the calculations. Management explained the premise being that these assets were previously funded by government through capital grants. The replacement and refurbishment of these assets is expected to be through government funded maintenance performed through the public rail operators and/or the equity injections from NSW Treasury rather than through access and licence fees.


The number of moderate risk findings increased from prior year

Forty-five moderate risk findings were reported in 2020–21, representing a 73.1 per cent increase from 2019–20. Of these, 14 were repeat findings, and 31 were new issues. 

Key moderate risk findings related to:

  • weaknesses in user access management to key financial systems
  • management of contracts and agreements register
  • management of supplier and payroll masterfiles
  • accounting for assets
  • control deficiencies at service organisations
  • segregation of duties relating to the hiring of employees
  • conflict of interest management
  • annual leave management
  • review of internal audit charter
  • disaster recovery planning.

Transport Asset Holding Entity of New South Wales

Background

The establishment of TAHE was originally announced by the NSW Government in the 2015–16 State Budget. On 1 July 2020, the former Rail Corporation New South Wales (RailCorp), a not-for-profit entity, transitioned to the Transport Asset Holding Entity of New South Wales (TAHE), a for-profit statutory state-owned corporation under the Transport Administration Act 1988. There was no change in the structure of TAHE as a new entity was not created. Ownership remains fully with the government. TAHE, and the former RailCorp, were both classified as Public Non-Financial Corporation (PNFC) entities within the Total State Sector Accounts.

Prior to 1 July 2015, the government paid appropriations to Transport for NSW, a General Government Sector (GGS) agency, to construct transport assets. When completed, these assets were granted to the former RailCorp, a not for-profit entity within the PNFC sector. The grants to the former RailCorp were recorded as an expense in the State’s GGS budget result.

From 1 July 2015, the government announced the creation of TAHE (a dedicated asset manager). Funding for new capital projects was to be provided through equity injections and was no longer recorded as an expense to the GGS budget, even though the business model was yet to be determined. The change, as explained in the 2015–16 State Budget, was due to the expectation that the former RailCorp will transition to TAHE, which was intended, over time to provide a commercial return. That Budget also highlighted how the change, which was largely a change in the basis of accounting, was intended to improve the GGS budget result each year. In total, the GGS has contributed approximately $11.1 billion to TAHE since 2015–16. This includes the equity injections from the GGS to TAHE made in the current year of $2.4 billion.

NSW Treasury initially set a timetable for the stand-up of TAHE of 1 July 2019, which included finalising the business model, operating model and contracts for the use of TAHE's assets. The enactment of the Transport Administration Act 1988 resulted in RailCorp transitioning to TAHE on 1 July 2020, 12 months after its originally planned operational date. Contributions paid to the former RailCorp and subsequently to TAHE by the GGS were treated as equity investments from July 2015 forward. This treatment continued, despite delays in settling the business model. In 2020, the Audit Office raised a high-risk finding due to the significance of the financial reporting impacts and business risks for NSW Treasury and TAHE.

The business model adopted and the flow of funds between transport agencies in the GGS and PNFC sectors is shown in the diagram below. For further details refer to the Report on State Finances 2021.

Appendix one – Misstatements in financial statements submitted for audit

Appendix two – Early close procedures

Appendix three – Financial data

Copyright notice

© Copyright reserved by the Audit Office of New South Wales. All rights reserved. No part of this publication may be reproduced without prior consent of the Audit Office of New South Wales. The Audit Office does not accept responsibility for loss or damage suffered by any person acting on or refraining from action as a result of any of this material.

Published

Actions for Treasury 2021

Treasury 2021

Treasury
Finance
Compliance
Financial reporting
Internal controls and governance
Management and administration

What the report is about

The results of Treasury cluster agencies' financial statement audits for the year ended 30 June 2021. The results of the audit of the NSW Government's consolidated Total State Sector Accounts (TSSA), which are prepared by NSW Treasury, are reported separately in our report on State Finances 2021.

What we found

Unmodified audit opinions were issued for all Treasury cluster agencies.

The number of identified monetary misstatements increased from 16 in 2019–20 to 24 in 2020–21.

Reported corrected monetary misstatements decreased from 15 in 2019–20 to seven with a gross value of $1.1 billion in 2020–21.

The largest corrected misstatement was in NSW Treasury's financial statements and was a $1 billion correction to administered borrowings.

Reported uncorrected monetary misstatements increased from one in 2019–20 to 17 with a gross value of $168 million in 2020–21.

Seven of the 2020–21 uncorrected misstatements related to one common decision relating to investment management funds terminated during the year by the NSW Treasury Corporation (TCorp).

All agencies submitted their 2020–21 financial statements within NSW Treasury's reporting deadlines.

What the key issues were

Significant audit findings were identified with respect to NSW Treasury's processes to prepare the NSW Government's consolidated TSSA (whole of government accounts). This included one extreme finding and several high-risk findings related to NSW Treasury processes. These are reported in our report on State Finances 2021.

Two high-risk issues raised in 2019–20 were also not addressed by NSW Treasury during the year and were repeat issues reported to management. These related to the appropriations framework and resolution of cross cluster payments, and instances where some agencies spent deemed appropriations money without an authorised delegation.

A number of previously reported audit findings and recommendations with respect to icare continue to be ongoing issues, namely:

  • The Workers Compensation Nominal Insurer continues to hold less assets than the estimated present value of its future payment obligations.
  • The Workers Compensation Nominal Insurer's four week return-to-work rate fell from 68% to 64%. This is below icare's 70% target. Contributing factors include COVID-19 lockdowns which have impacted claims handling processes, and increased barriers to claimants returning to work.
  • Instances were noted where inadequate documentation was kept on file to support claims, including pre-injury average weekly earnings (PIAWE) calculations.

The Workers Compensation (Dust Diseases) Authority increased its outstanding claims liability by $93.9 million, which included $39.3 million to remediate historical underpayments, resulting from workers not being paid the rate required by existing legislation.

The icare Board approved a new approach for remediating PIAWE underpayments on 24 September 2021, the date the Workers Compensation Nominal Insurer’s financial statements were approved for issue. The impact of the decision on the financial statements was not discussed with the Audit Office and assessed as an ‘after balance date event’.

What we recommended

Our report on State Finances 2021 made several recommendations to improve NSW Treasury processes. These included:

  • improve processes to ensure information is shared with audit on a timely basis
  • seek legislative amendments to resolve statutory inconsistencies relating to statutory reporting time frames
  • implement effective quality review processes over key accounting information
  • establish a policy to determine the minimum expected rate of return on equity injections in other public sector entities
  • prepare robust financial projections to support accounting decisions
  • re-confirm sector classifications of TAHE, Sydney Trains and NSW Trains
  • ensure sufficient oversight of its use of consultants and assess the risk of an overdependence on consultants at the cost of internal capability
  • improve disclosures of equity injections invested in other public sector entities
  • determine a state-wide policy on when borrowings are recognised in agency financial statements
  • make legislative amendments to ensure expenditure incurred across financial years does not exceed the appropriation authority and assess the financial reporting impact
  • improve the guidance provided to agencies to ensure expenditure of public money is properly supported by authorised delegations.

We also recommended icare should ensure:

  • it has sufficient controls over claim payments including an effective quality assurance program, to minimise claim payment errors
  • that documentation to support injured worker benefit calculations is appropriately maintained, and the documentation requirements are set out in a policy
  • the impact of ‘after balance date events’ on financial statements is appropriately assessed
  • its operational practices are improved to ensure the correct payment of claims in compliance with legislative requirements. icare also needs to act on a timely basis on received legal advice and amend operational practices to ensure correct payments are made.

Fast facts 

NSW Treasury notes that it is the Government's principal financial and economic adviser to guide the State’s growth for the benefit of the people who live, work and study in NSW.

  • $111b funds under management as at 30 June 2021
  • 100% unqualified audit opinions were issued on agencies’ 30 June 2021 financial statements
  • 24 monetary misstatements were reported in 2020–21
  • $17b total expenditure incurred in 2020–21
  • 12 extreme and high-risk findings were identified
  • 30% of reported issues were repeat issues

This report focuses on agencies within the Treasury cluster and provides parliament and other users of the Treasury cluster's financial statements with the results of our audits, our observations, analysis, conclusions and recommendations in the following areas:

  • financial reporting
  • audit observations.

NSW Treasury also prepares the consolidated NSW whole of government financial statements (the Total State Sector Accounts), which is reported in the report on State Finances 2021.

Financial reporting is an important element of good governance. Confidence and transparency in public sector decision making is enhanced when financial reporting is accurate and timely.

This chapter outlines our audit observations related to the financial reporting of agencies in the Treasury cluster (the cluster) for 2021.

Section highlights

  • Unmodified audit opinions were issued on all the cluster agencies 2020–21 financial statements.
  • The number of identified monetary misstatements increased from 16 in 2019–20 to 24 in 2020–21.
  • Reported corrected monetary misstatements decreased from 15 in 2019–20 to seven with a gross value of $1.1 billion in 2020–21. The largest corrected misstatement was in NSW Treasury's financial statements resulting in a $1 billion correction to its administered borrowings. The correction was to address an understatement by NSW Treasury which did not recognise a liability for funds raised by NSW Treasury Corporation (TCorp) on its behalf as it applied settlement date accounting rather than trade date when recognising these borrowings. A corresponding receivable from TCorp was also recognised to reflect that funds were to be received on 1 July 2021.
  • The number of uncorrected misstatements increased from one in 2019–20 to 17 in 2020–21. Two of the misstatements above $5 million related to investment valuations within the SAS Trustee Corporation Pooled Fund, two related to premium income overstatements within the Workers Compensation Nominal Insurer, and one related to NSW Treasury administered liabilities and expenses where it recognised a provision for remediation costs when it had no present obligation. A further seven related to investment management funds that were terminated during the year by TCorp.
  • Nine agencies that were required to perform early close procedures did not complete a total of 25 mandatory procedures. The most common incomplete early close procedures include inter and intra (cluster) agency balances and transactions not confirmed with the counterparty agency and significant management judgements and assumptions made when estimating transactions and balances not documented.
  • To ensure compliance with Australian Accounting Standards, transactions and balances that were formerly reported in the Crown Entity’s financial statements are now reported by NSW Treasury as it primarily controls or administers the transactions and balances on behalf of the State.
  • icare changed the risk margin applied to measure the Workers Compensation Nominal Insurer's outstanding claims liability. If the risk margin used when valuing its 2019–20 outstanding claims liability had been retained, its net asset deficiency would have worsened compared to the prior year. The change in risk margin aligns the Nominal Insurer’s ‘probability of adequacy’ with the Australian Prudential Regulation Authority’s minimum reporting requirements for general insurers.
  • The icare Board approved a new approach for remediating pre-injury average weekly earnings underpayments (subject to legal advice, and assessment by a wage remediation expert), on 24 September 2021 and announced on 11 November 2021. The impact of the decision on the Nominal Insurer's financial statements was not assessed by icare as an ‘after balance date event’ and was not raised with the Audit Office prior to icare finalising its 2021 financial statements on 24 September 2021.

Appropriate financial controls help ensure the efficient and effective use of resources and administration of agency policies. They are essential for quality and timely decision making.

This chapter outlines our observations and insights from our financial statement audits of agencies in the Treasury cluster.

Section highlights

  • The 2020–21 audits identified one new Extreme Risk and 11 High Risk findings. The extreme risk finding related to the incomplete provision and timely access to information to the Total State Sector Accounts (TSSA) audit and the accounting for the General Government Sector's investment in TAHE. Findings related to the TSSA audit are reported in the report on State Finances 2021. Of the 11 high risk findings, two were repeat findings relating to cross cluster payments and authorisation to spend deemed funds. High risk repeat findings need to be addressed with greater priority.
  • There were 21 moderate risk findings reported to management in 2020–21, ten of which were repeat findings. The most common repeat finding related to claims processing, information technology user access administration. Repeat findings, particularly those that relate to data protection, need greater prioritisation and should be implemented on a timely basis.
  • icare is in the process of implementing organisational reform in response to findings in recent external reviews. These reviews identified 151 recommendations for icare to improve in the areas of risk and governance, performance, and culture and accountability. All of the recommendations were accepted by icare and are expected to be addressed through their ‘Improvement Program’. A number of the observations referred to in this report were also identified in the external reviews.
  • The Nominal Insurer's four week return-to-work rate fell from 68% at 30 June 2020 to 64% at 30 June 2021 and was at 63% at 30 September 2021. This is below icare's target of 70%.
  • The Nominal Insurer overpaid, and underpaid claims to policyholders due to claims processing weaknesses. There was also insufficient documentation to support key inputs to weekly benefit payments, thereby further increasing the risk of claims being overpaid, and underpaid.
  • The Home Building Compensation Fund's net liability position reduced from $746 million at 30 June 2020 to $534 million at 30 June 2021 due to increases in premium rates and increased building activity from stimulus measures.
  • The Nominal Insurer's provision for errors in pre-injury average weekly earnings decreased from $21 million to 30 June 2020, to $11.6 million at 30 June 2021. The provision was not reassessed for icare’s decision to proactively remediate PIAWE underpayments.
  • The NSW Self Insurance Corporation also recognised a $12.8 million provision at 30 June 2021 to remediate past underpayments.

Findings reported to management

The number of findings reported to management has decreased, but 30% of all issues were repeat issues and these need greater focus and prioritisation

Breakdowns and weaknesses in internal controls increase the risk of fraud and error. Deficiencies in internal controls, matters of governance interest and unresolved issues were reported to management and those charged with governance of agencies. The Audit Office does this through management letters, which include observations, related implications, recommendations and risk ratings.

In 2020–21, there were 57 findings raised across the cluster (71 in 2019–20), 30% of which were repeat issues (32% in 2019–20).

The most common repeat issues related to claims processing and information technology user access administration.

A delay in implementing audit recommendations increases the risk of intentional and accidental errors in processing information, producing management reports and generating financial statements. This can impair decision-making, affect service delivery and expose agencies to fraud, financial loss and reputational damage. Poor controls may also mean agency staff are less likely to follow internal policies, inadvertently causing the agency not to comply with legislation, regulation and central agency policies.

The table below describes the common issues identified across the cluster by category and risk rating.

Risk rating Issue
Information technology

Moderate2
4 new
2 repeat

Low1
6 new
4 repeat

The financial audits identified the need for agencies to improve information technology processes and controls that support the integrity of financial data used to prepare agencies' financial statements. Of particular concern are issues associated with:
  • poor user access administration and monitoring of privileged user activities
  • lack of disaster recovery planning.
Internal control deficiencies or improvements

High3
1 repeat

Moderate2
5 new
7 repeat

Low1
9 new
 

 

The financial audits identified internal control weaknesses across key business processes, including:
  • lack of controls to ensure cluster expenditure does not exceed a minister's appropriation authority received under the annual Appropriations Act and the GSF Act
  • inadequate procurement controls including purchase orders not being used and policy documents not stipulating thresholds which require minimum quotations or tenders
  • inadequate claim processing controls leading to documentation not kept to support claims, and errors in payments.
High risk issues are discussed later in this chapter.
Financial reporting

High3
2 new

Moderate2
2 new
1 repeat

Low1
2 new 

The financial audits identified opportunities for agencies to strengthen financial reporting, including:
  • need to review significant judgements, and continue to assess whether assets are controlled
  • grants being incorrectly accounted for leading to errors
  • provisions not including costs to settle the obligation and errors in the accuracy and completeness of underlying data used in valuations.
High risk issues are discussed later in this chapter.
Governance and oversight

Extreme4
1 new

High3
7 new

Low1
1 new
 

The financial audits identified the need for agencies to improve governance and oversight processes, including:
  • documentation was inadequate and key documents were either not provided to the Audit Office, or were not provided on a timely basis, or their existence was not made known to the Audit Office
  • inconsistencies in the GSF Act and GSA Act relating to statutory timeframes
  • numerous versions of working papers were submitted all of which contained errors, omissions and/or poor logic
  • no formal policy or benchmark on expected investment returns from other government sectors
  • addressing significant uncertainty relating to access fees to be paid by rail operators raised in the Total State Sector Accounts audit opinion
  • the sector classification of certain Public Non-Financial Corporations needs to be confirmed with the Australian Bureau of Statistics
  • external consultants were used extensively to advise government agencies on matters related to TAHE
  • there is no state-wide policy about borrowings which provides guidance around performance obligations arising under trades between government agencies.
Extreme and high risk issues are discussed later in this chapter and in the report on State Finances 2021.
Non-compliance with key legislation and/or central agency policies

High3
1 repeat

Low1
1 new
1 repeat

The financial audits identified the need for agencies to improve its compliance with key legislation and central agency policies, including:
  • non-compliance with the GSA Act and expenditure of public monies not supported by authorised delegations or spent for an authorised and valid purpose
  • input tax credits were not always claimed correctly.
High risk issues are discussed later in this chapter.

 Extreme risk from the consequence and/or likelihood of an event that has had, or may have a negative impact on the entity.
3 High risk from the consequence and/or likelihood of an event that has had, or may have a negative impact on the entity.
2 Moderate risk from the consequence and/or likelihood of an event that has had, or may have a negative impact on the entity.
1 Low risk from the consequence and/or likelihood of an event that has had, or may have a negative impact on the entity.

 Note: Management letter findings are based either on final management letters issued to agencies, or draft letters where findings have been agreed with management.

The number of moderate risk findings decreased from prior year

There were 21 moderate risk findings reported in 2020–21, representing a 30% decrease from 2019–20. Of these, ten were repeat findings, and 11 were new issues.

Moderate risk repeat findings include:

  • claims processing weaknesses including claim payment errors, and inadequate documentation to support calculations and evidence claims were reviewed by someone with appropriate delegation
  • inadequate review of user access and higher risks of unintended or unauthorised system access
  • controls assurance reports from an outsourced service provider did not cover the services it provided to the government agency
  • failure to review procurement contracts register to ensure it is accurate and complete
  • ongoing control deficiencies with grant application and approval processes
  • key policies including delegations not being reviewed in a number of years and do not incorporate new requirements from more recent legislation
  • quality review processes failing to identify material classification errors associated with grant funding.

NSW Treasury related matters

Accounting for the Government's investment in Transport Asset Holding Entity

A total of seven recommendations were made with respect to NSW Treasury's processes to prepare the NSW Government's consolidated whole of government accounts (the TSSA). This included one extreme risk finding and six high risk findings. The extreme finding related to NSW Treasury needing to significantly improve its processes to ensure all key information is identified and shared with the Audit Office on a timely basis. Other high-risk findings were identified which resulted in the following recommendations for NSW Treasury:

  • establishing a policy to determine the minimum expected rate of return on the GGS equity injections in other public sectors entities and report on the performance of these GGS investments in the TSSA, including how much and what type of returns the government is obtaining from its investments compared to its targeted return
  • facilitate revised commercial agreements to reflect access and license fees that were agreed in the 18 December 2021 Heads of Agreement between Transport for NSW, TAHE and the operators Sydney Trains and NSW Trains
  • with TAHE, prepare robust projections and business plans to support GGS investment returns beyond FY2031.
  • liaising with the ABS to re-confirm the classification of TAHE, NSW Trains and Sydney Trains as entities within the PNFC sector
  • monitoring the risk that control of TAHE assets could change in future reporting periods and the implications on the TSSA
  • consider whether there is sufficient competent oversight of its use of consultants and assess the risk of an over dependence on consultants at the cost of internal capability.

More details on the recommendations to NSW Treasury relating to its accounting for the GGS investment in TAHE are included on pages 7 to 24 of the State Finances 2021 NSW Auditor-General’s Report to Parliament. 

Borrowings of $1 billion were understated by NSW Treasury

NSW Treasury, a GGS agency, made agreements to borrow $1 billion from New South Wales Treasury Corporation (TCorp), a PFC sector agency. Some of these agreements were entered as early as 17 May 2021 and all agreements for borrowings were entered into before 30 June 2021. However, NSW Treasury requested that settlement of those additional borrowings be deferred until 1 July 2021.

As TCorp raised the funds before 30 June 2021, it recognised a financial asset and liability to NSW Treasury on 30 June 2021. Despite TCorp having raised the funds by 30 June 2021 under the mutually agreed trade deal, NSW Treasury did not recognise any borrowings at year end on the basis that it requested the settlement date and receipt of cash to be deferred to past the balance sheet date. This led to an understatement of debt liabilities of $1 billion by NSW Treasury, and an inconsistent accounting treatment between the two agencies. NSW Treasury subsequently corrected the misstatement after the matter was raised by the audit, resulting in the GGS recognising $1 billion in financial assets and borrowings at 30 June 2021.

More detail on these inconsistencies is on page 37 of the State Finances 2021 NSW Auditor-General’s Report to Parliament. We recommended NSW Treasury seek develop a state-wide accounting policy for borrowings which ensure correct and consistent accounting treatment between agencies and sectors.

Inconsistencies exist in the GSF Act and GSA Act related to key statutory timeframes

There are inconsistencies between key statutory reporting timeframes imposed on the Treasurer and Auditor-General for the Consolidated State Financial Statements (the Statements) in the Government Sector Finance Act 2018 (GSF Act) and Government Sector Audit Act 1983 (GSA Act). Ambiguity in the statutory reporting timeframes could impact on the future timely provision of this information to Parliament. More detail on these inconsistencies is on page 54 of the State Finances 2021 NSW Auditor-General’s Report to Parliament. We recommended NSW Treasury seek legislative amendments in Parliament to resolve these inconsistencies.

NSW Treasury lacks a framework to monitor and provide assurance to ministers that they are in compliance with their appropriation authority

In July 2021, NSW Treasury highlighted a potential issue associated with certain cross-cluster payments which was based on advice received from the Crown Solicitor in January 2021. After being made aware of the issue, the Audit Office obtained its own advice on matters related to the appropriations framework under relevant state legislation. In the advice to the Audit Office, the Crown Solicitor advised that an agency is not subject to its own legally appropriated expenditure limit (assuming it is not subject to any annual spending limit imposed through an instrument of delegation or a budget control authority issued by the Treasurer under section 5.1 of the GSF Act). In effect, because responsible ministers are given appropriations, these legal expenditure limits, rest in aggregate, with the principal department and agencies the minister is responsible for. It is not possible for an individual agency to monitor or determine at what ‘point in time’ expenditure has been incurred in excess of the minister’s appropriation authority and there is currently no framework to monitor this.

Further detail on this matter is on pages 54 to 56 of the State Finances 2021 NSW Auditor-General’s Report to Parliament. In this report, we recommended that NSW Treasury:

  • ensure a framework exists to monitor and provide assurance to ministers that expenditure incurred across a financial year by agencies under the relevant minister's coordination does not exceed the appropriation authority conferred by the annual Appropriations Act and the GSF Act
  • assess how the requirement to prepare a Summary of Compliance under Australian Accounting Standards impacts relevant principal departments and cluster agencies financial statement disclosures.

Agencies have again spent monies without an authorised delegation

In the State Finances NSW Auditor-General's Report to Parliament for 2020 and 2021 we reported instances where agencies spent money received from an annual appropriation and/or deemed appropriation money without an authorised delegation from the relevant minister(s) as required by sections 4.6(1) and 5.5(3) of the GSF Act. Further detail on this matter is on pages 56 to 57 of the State Finances 2021 NSW Auditor-General’s Report to Parliament. In this report, we recommended NSW Treasury promptly improve the guidance it provides agencies to ensure that expenditure of public monies is properly supported by authorised delegations.

Control deficiencies at NSW Treasury's service providers

NSW Treasury's business processes and information technology services were provided by Infosys, Unisys and the Department of Customer Service during 2020–21. Together this constitutes the GovConnect environment.

The GovConnect information technology general controls (ITGC) were qualified in 2020–21. The key controls over user access, system changes and batch process failed in all ITGC reports. Most of these deviations were not mitigated or sufficiently mitigated to address the risk of unauthorised user access.

In response to the internal control qualifications, the audit teams performed data analytics over payroll and accounts payable to obtain reasonable assurance that these control deficiencies did not materially impact on relevant agencies' financial statements.

Refer to the Customer Service 2021 NSW Auditor-General’s Report to Parliament for further details.

Insurance related matters

icare is in the process of implementing organisational reform in response to findings in recent external reviews. These reviews have identified 151 recommendations for icare to improve in the areas of risk and governance, performance, and culture and accountability. The reviews include the April 2021 McDougall Review, and the February 2021 ‘Independent Review of icare governance, accountability and culture’ which was recommended by SIRA in the Dore Report.

All of these recommendations were accepted by icare and are expected to be addressed through their ‘Improvement Program’. As at February 2022, icare report that 21 have been addressed, 139 are in progress, and 15 still to commence.

A number of the observations referred to in this report were also identified in the above reviews and are expected to be actioned as part of the improvement program.

Workers Compensation Nominal Insurer (the Nominal Insurer)

The Nominal Insurer’s net asset deficiency at 30 June 2021

Last year's Central Agencies Report to Parliament reported that the Workers Compensation Nominal Insurer (the Nominal Insurer), the NSW Self Insurance Corporation and the Lifetime Care and Support Authority of New South Wales all had negative net assets at 30 June 2020. After strong investment returns in 2020–21, only the Nominal Insurer continued to have negative net assets at 30 June 2021.

The Nominal Insurer's negative net assets of $252.9 million at 30 June 2021 ($316.2 million at 30 June 2020) means that it still does not hold sufficient capital to meet the estimated present value of its future payment obligations, when measured in accordance with the accounting framework. The financial statements continued to be prepared on a going concern basis because the future payment obligations are not all due for settlement within the next 12 months.

As noted in section 2.4 ‘Key accounting issues’, icare changed from an 'Accounting Ratio', to an 'Insurance Ratio', to assess the Nominal Insurer’s capital position from 2020–21. The insurance ratio uses a (higher) discount rate based on the expected earnings rate on the Nominal Insurer’s assets, rather the ‘risk free’ rate which is used for financial reporting.

Last year's Report to Parliament also noted that the deterioration in the value of the Nominal Insurer’s net assets has resulted in its funding ratio at 30 June 2020 being outside of the ‘target operating zone’ set by the Board of icare. The Insurance Ratio at 30 June 2021 is 122%, which is less than icare's target operating zone of over 130%.

icare is assessing how it can increase the Nominal Insurer’s funding ratio, and advises that actions taken to date include the execution of the Nominal Insurer Improvement Program (the Improvement Program) and an increase in premium rates.

icare were given approval by the State Insurance Regulatory Authority (SIRA) to increase workers compensation premium rates from 1.4% to 1.44%  of wages (2.9%) for the 2021–22 policy year. icare advises that their pricing strategy for workers compensation premiums is for ‘modest increases over the medium term’.

Return-to-work rates have worsened

Last year's Central Agencies Report to Parliament noted that the Nominal Insurer has experienced deteriorating return-to-work rates since late 2017. According to data published by SIRA, the Nominal Insurer’s monthly four week return-to-work rate has continued to decline, falling from 68% at 30 June 2020 to 64% at 30 June 2021, and down to 63% at 30 September 2021.

A key assumption when measuring the Nominal Insurer’s outstanding claims liability, is the amount of time that injured workers will remain on benefits (i.e. continuance rates). This assumption is significantly aligned with return-to-work rate measures. At 30 June 2021, the liability was increased by $296 million due to changes in continuance rate assumptions, with workers expected to remain on benefits longer. This change is consistent with the fall in four week return-to-work rates.

The four week return-to-work rate trend since August 2017 is shown in the graph below.

Appendix one - Misstatements in financial statements submitted for audit

Appendix two – Early close procedures

Appendix three – Timeliness of financial reporting

Appendix four – Financial data

Appendix five – Acquittals and other opinions

 

Copyright notice

© Copyright reserved by the Audit Office of New South Wales. All rights reserved. No part of this publication may be reproduced without prior consent of the Audit Office of New South Wales. The Audit Office does not accept responsibility for loss or damage suffered by any person acting on or refraining from action as a result of any of this material.

 

Published

Actions for Local government business and service continuity arrangements for natural disasters

Local government business and service continuity arrangements for natural disasters

Local Government
Internal controls and governance
Management and administration
Project management
Risk
Service delivery

What the report is about

Natural disaster events, including bushfires and floods, have directly impacted some local councils in New South Wales over recent years. It is important for local councils to effectively plan so that they can continue operations through natural disasters and other disruptions.

This audit assessed the effectiveness of Bega Valley Shire Council and Snowy Valleys Council’s approaches to business and service continuity arrangements for natural disasters.

What we found

Bega Valley Shire Council has a documented approach to planning for business and service continuity that provides for clear decision making processes and accountability.

Bega Valley Shire Council has prepared for identified natural disaster risks to business and service continuity but can do more to monitor how it has implemented controls responding to these risks.

Bega Valley Shire Council did not follow all aspects of its business continuity plan in responding to the 2019–20 bushfires.

Bega Valley Shire Council can do more to ensure its business continuity management approach is regularly reviewed and updated, and that staff are regularly trained in its implementation.

Snowy Valleys Council did not have a finalised approach to ensure business and service continuity until October 2020. Now in place, this approach identifies governance, assigns roles and responsibilities, and includes procedures to retain or resume services. That said, the Council has not adequately documented key elements of its business continuity management approach.

Snowy Valleys Council's strategic risk register identifies that natural disasters may impact its ability to deliver services, but the Council has not identified controls to respond to these risks.

During the 2019–20 bushfires, in the absence of a business continuity plan, Snowy Valleys Council relied on the local knowledge of its staff to manage service continuity in line with directions from the Local Emergency Operations Controller and the combat agency (the Rural Fire Service).

Both councils advised that, during the 2019–20 bushfires, services were maintained, sometimes with adaptation and sometimes with support from other councils, NSW Government and Australian Government agencies.

What we recommended

Bega Valley Shire Council should update and regularly review its business continuity plans, provide business continuity training, and improve its monitoring of risk controls and actions, including for natural disaster impacts.

Snowy Valleys Council should document and monitor all disruption-related risks and controls, regularly review and update its business continuity plans, and progress planned actions to increase staff awareness of business continuity plans.

Across both councils, we recommended that recordkeeping relating to service delivery during natural disasters should be adequate to inform post incident reviews and future updates to business continuity.

Fast facts

  • Multiple natural disasters affected the audited councils in 2019–20:
    • bushfires in 2019–20
    • storms and floods in January 2020
    • storms and floods in July and August 2020
    • storms and floods in October 2020.
  • 6,279kmSize of Bega Valley Shire Council (area)
  • 2,203kmArea burnt within Bega Valley Shire Council in 2019–20 bushfires
  • 8,959kmSize of Snowy Valleys Council (area)
  • 3,339kmArea burnt within Snowy Valleys Council in 2019–20 bushfires.

Natural disaster events, including bushfires and floods, have directly impacted some local councils in New South Wales over recent years. Given their important role in delivering essential services to their communities, it is important for local councils to effectively plan so that they can continue operations through natural disasters and other disruptions.

Business continuity plans are a widespread mechanism used by governments and private sector organisations to ensure they are prepared to respond effectively to disruptions. In New South Wales, business continuity plans are widely used by local councils to help ensure continuity of service delivery, safety and availability of staff, availability of information technology systems and other systems, financial management and governance. There are no current sector-wide requirements or policies for business continuity management issued by the Department of Planning and Environment (DPE)1 for NSW councils. As such, councils can develop their own business continuity management frameworks.

Our 'Report on Local Government 2020' considered the financial and governance impacts from recent natural disaster events on local councils in New South Wales. It also considered sector-wide trends in business continuity planning, including how many councils enacted or updated their business continuity plans in 2019–20.

The report found that all councils were impacted by emergency events, and that some councils changed their governance, policies, systems, and processes to respond to the emergency events. Sixty-five per cent of councils updated their business continuity plan as a response to recent emergency events, and 43 per cent of councils updated their disaster recovery plan.

This audit follows on from the 'Report on Local Government 2020' with a detailed examination of the effectiveness of business and service continuity arrangements for natural disasters in two councils.

The selected councils for this audit were Bega Valley Shire Council and Snowy Valleys Council. They were selected because they had been heavily impacted by the 2019–20 bushfires and other natural disaster events, such as storms and floods between December 2018 to December 2020.

The objective of this performance audit was to assess the effectiveness of the councils' approaches to business and service continuity arrangements for natural disasters. In making this assessment, we considered whether the selected councils:

  • had documented approaches for identifying, mitigating, and responding to disaster-related risks to business and service continuity
  • effectively implemented strategies to prepare for identified disaster-related impacts
  • responses during selected disasters were effective in managing business and service continuity.

Conclusion - Bega Valley Shire Council

Bega Valley Shire Council has a documented approach to planning for business and service continuity that provides for clear decision-making processes and accountability.

Since 2018, the council has prepared for identified natural disaster risks to business and service continuity, but can do more to monitor how it has implemented controls responding to these risks.

Bega Valley Shire Council did not follow all aspects of its business continuity plan in responding to the 2019–20 bushfires.

The council can do more to ensure its business continuity management approach is regularly reviewed and updated, and that staff are regularly trained in its implementation.

Bega Valley Shire Council has a documented approach to business continuity management that is integrated with its broader approach to enterprise risk management and is supported by clear decision-making processes and accountability. This includes a business continuity plan (BCP), BCP subplans, and a business impact analysis (BIA). The council made changes to its BIA in 2019 following the 2018 Tathra bushfires within its local government area (LGA), but its BCP and BCP subplans have not been updated since 2016 and key information is out of date.

Bega Valley Shire Council has identified high-level controls and strategies to mitigate disaster-related risks and undertakes post incident reviews to capture lessons following a disaster, but many high-risk actions resulting from those reviews remain outstanding.

Bega Valley Shire Council identified risks, controls, and actions to prepare for natural disaster impacts between 2018 to 2020. However, the council has not effectively monitored implementation of the identified controls. Bega Valley Shire Council has only partially implemented the actions and recommendations from internal reviews that identified gaps in its business continuity management approach.

Bega Valley Shire Council did not follow all aspects of its business continuity plan in responding to the 2019–20 bushfires, instead relying on the local knowledge of its staff. The council has not provided BCP scenario training since 2015 and has not monitored completion rates of its online business continuity management training for staff.

Bega Valley Shire Council did not keep records of its decision of whether to enact its BCP during the 2019–20 bushfires, but advised its ability to follow the BCP was not possible due to the scale and impact of the bushfires surpassing the expectations included in its BCP and BCP subplans.

The council advised that essential council-led services were largely maintained during the disaster, sometimes with adaptation of services, and sometimes with support from other councils, NSW Government and Australian Government agencies.

As Bega Valley Shire Council did not maintain formal records of service disruptions for most services, did not follow all aspects of its BCP during the 2019–20 bushfires, and because it requested and received support from other agencies, we are unable to assess the impact of its planning and preparation activities on the continuity of services.

Bega Valley Shire Council took actions during the 2019–20 bushfires to communicate key service changes to staff, residents, and stakeholders, and regularly sought feedback on residents' experiences.

Bega Valley Shire Council could improve the effectiveness of its business continuity management approach by undertaking regular staff training (including scenario training) and ensuring that its business continuity management framework is routinely updated to reflect current practice and current staff. 

 

Conclusion - Snowy Valleys Council

Snowy Valleys Council did not have a finalised approach to ensure business and service continuity until October 2020. Now in place, this approach identifies governance, assigns roles and responsibilities and includes procedures to retain or resume services. That said, the council has not adequately documented key elements of its business continuity management approach.

Snowy Valleys Council's risk register identifies that natural disasters may impact its ability to deliver services, but the council has not identified controls to respond to these risks.

During the 2019–20 bushfires, in the absence of a business continuity plan (BCP) or BCP subplans, the council relied on the local knowledge of its staff to manage service continuity in line with directions from the Local Emergency Operations Controller and the combat agency (the Rural Fire Service).

Snowy Valleys Council did not have a finalised BCP, BCP subplans, or BIA until after the 2019–20 bushfires. The council finalised most of its business continuity management framework in late 2020 and this framework now establishes governance, including assigning roles and responsibilities, and identifies contingencies and procedures to retain or resume critical services.

There are gaps in how Snowy Valleys Council has documented key elements of its business continuity management approach. The council advised it has completed a BIA, but has not retained the completed version of this document as it was not managed under Snowy Valleys Council's record management procedures. Some of the council's BCP subplans have gaps in process information and contact details which means BCP subplan owners and other potential users may not have access to accurate, up to date information when responding to a disruption event.

The council advised it provided BCP scenario training in 2016, 2018, and 2021, but was unable to provide any evidence of the 2018 training. As the current BCP and BCP subplans were only finalised in 2021, the 2016 and 2018 training were based on the previous BCP framework, developed under the former Tumut Shire Council. Additionally, the council advised it has developed BCP awareness training for staff as part of induction training, but has not provided a clear timeframe for implementing this training.

The council undertakes post incident reviews after most service disruption events, but has not undertaken a post incident review of the 2019–20 bushfires, despite its significant impact within the Snowy Valleys Council LGA.

Snowy Valleys Council advised that it identifies and mitigates or controls for disaster related risks within broader enterprise-wide risk assessments. Snowy Valleys Council’s strategic risk register identifies the risk of natural disasters to service delivery, but does not identify preventative controls or resilience strategies to mitigate these risks. The council monitors and improves the resilience of some assets as part of its regular operations of maintaining assets but does not clearly link such actions to how they contribute to reducing the risk of natural disaster related impacts. Snowy Valleys Council advises it works with other agencies, such as the Rural Fire Service and the local Bush Fire Management Committee, to plan for bushfire risks.

In the absence of a BCP or BCP subplans, Snowy Valleys Council relied on individual team members to manage service continuity during the 2019–20 bushfires based on directions by the local Emergency Operations Controller, and the Rural Fire Service. The council advised that the delivery of essential council-led services was largely maintained during the 2019–20 bushfires, sometimes with adaptation and support from other NSW Government and Australian Government agencies. Snowy Valleys Council took actions during the 2019–20 bushfires to communicate key service changes to staff, residents, and stakeholders, and regularly sought feedback on residents' experiences.

As Snowy Valleys Council did not maintain formal records of any service disruptions and did not have a finalised business continuity management approach in place to guide its response during the 2019–20 bushfires, we are unable to assess the impact of its planning and preparation activities on the continuity of services.

 

 1 At the time of this audit, the Department of Planning and Environment is responsible for supporting and regulating local councils in New South Wales through the Office of Local Government. Prior to 21 December 2021, the Department of Planning and Environment was named the Department of Planning, Industry and Environment.

Appendix one – Responses from councils and the Department of Planning and Environment 

Appendix two – Emergency management arrangements for local councils 

Appendix three – About the audit 

Appendix four – Performance auditing 

Copyright notice

© Copyright reserved by the Audit Office of New South Wales. All rights reserved. No part of this publication may be reproduced without prior consent of the Audit Office of New South Wales. The Audit Office does not accept responsibility for loss or damage suffered by any person acting on or refraining from action as a result of any of this material.

 

Parliamentary reference - Report number #362 - released 17 February 2022.

Published

Actions for Integrity of grant program administration

Integrity of grant program administration

Local Government
Premier and Cabinet
Internal controls and governance
Management and administration

What the report is about

This report assessed the integrity of the assessment and approval processes for two grant programs:

  • Stronger Communities Fund Round 2 (tied grants round), which was administered by the former Office of Local Government (OLG) and provided $252 million to newly amalgamated councils and other councils that had been subject to a merger proposal during 2017–18 and 2018–19.
  • Regional Cultural Fund, which was administered by Create NSW (now within the Department of Premier and Cabinet) and awarded $100 million for cultural projects in regional NSW.

What we found

The assessment and approval process for Round 2 of the Stronger Communities Fund lacked integrity. The government decided to prioritise funds for councils that had worked constructively with the government through the 2016 merger process. 

However, this information was not included in the program guidelines. The program guidelines were not published and did not contain details of selection and assessment processes. Councils and projects were instead identified by the former Premier, Deputy Premier and Minister for Local Government and communicated to OLG with little or no information about the basis for the council or project selection. There was no merit assessment of identified projects. This process resulted in 96 per cent of funds allocated to coalition state seats.

The assessment process that Create NSW used for the Regional Cultural Fund was robust and produced transparent and defensible recommendations to the minister. However, the former Minister for the Arts, in consultation with the former Deputy Premier, did not follow the recommendations of the independent assessment panel in 22 per cent of cases. Reasons for these changes were not documented by Create NSW.

What we recommended

The Department of Premier and Cabinet should develop a model for grant administration that must be used for all grant programs administered in NSW that:

  • is based on ethical principles such as impartiality, equity and transparency 
  • ensures assessments and decisions can be made against clear eligibility criteria
  • ensures accountability for decisions and actions of all those who are involved in the program 
  • includes minimum mandatory administration and documentation standards
  • requires any ministerial override of recommendations to be documented. 

The Department of Planning and Environment should ensure that guidelines prepared for all grant programs are published and include a governance framework that includes accountabilities and key assessment steps.

Fast facts    

Stronger Communities Fund Round 2

  • $252m allocated to 24 councils    
  • 96% allocated to council projects in coalition state seats
  • 36% of the funding ($90m) was allocated to a single council
  • $8m in projects identified before the program guidelines were finalised

Regional Cultural Fund

  • 405 applications received across three funding rounds
  • $99m awarded for 147 cultural projects in regional NSW 
  • 22% panel recommendations not followed by ministers  
  • $9.3m awarded to projects not recommended by panel

Grants are frequently used by the state government to deliver funds to councils and community organisations to provide infrastructure and services important to their local communities. Grant programs are administered by NSW Government agencies in line with priorities and objectives set by the government.

Guidance for agencies administering grant programs is available in the Good Practice Guide to Grants Administration (the 'DPC Guide') which is maintained by the Department of Premier and Cabinet (DPC). In addition to this guide, some agencies maintain their own grant program policies and guidelines. More broadly, public servants are required to comply with financial legislation and the Government Sector Employment Act 2013 which include requirements to be transparent, fiscally responsible and focus on the efficient, effective and prudent use of resources.

The objective of this performance audit is to assess the integrity of the assessment and approval processes for NSW Government grant programs.

The audit focuses on two grant programs, both administered during the 2017–18 and 2018–19 financial years. The Stronger Communities Fund (round two tied grants round) was administered by the former Office of Local Government (OLG), now referred to as the Local Government Group within the Department of Planning and Environment (DPE). The fund awarded $252 million to 24 councils that had amalgamated in 2016 or which had been the subject of a merger proposal. The Regional Cultural Fund was administered by Create NSW, now within the Department of Premier and Cabinet (DPC). The fund awarded $100 million to organisations in regional New South Wales to support the development of cultural infrastructure in regional areas.

The audit comments upon the role played by the then Premier, Deputy Premier, ministers and their staff in the audited grant programs to provide context. The Audit Office of NSW cannot compel those individuals to participate in the audit or provide documents. In all cases, reference to the Premier, Deputy Premier, ministers, MPs and their staff refers to the individuals who were in those roles at the time the grant programs were administered unless otherwise noted.

Conclusion

Stronger Communities Fund

The assessment and approval processes for round two of the Stronger Communities Fund (SCF) lacked integrity. The program guidelines developed by the Office of Local Government (OLG) were deficient in a number of aspects and were not used to guide the selection of councils or projects for funding. Of the 55 councils that met the eligibility criteria in the guidelines, 24 received funding. Ninety-six per cent of available SCF funding was allocated to projects in coalition-held state government electorates. Funding for councils was determined by the then Premier, Deputy Premier and Minister for Local Government and communicated by their staff through emails to OLG with little or no information about the basis for the council or project selection. OLG administered payment of these funds without questioning or recording the basis for selection. For the 22 councils where funding allocations were determined by the former Premier and Deputy Premier, the only record of their approval is a series of emails from their staff. The exclusion of key information from the program guidelines and the lack of formality in approving 22 of the 24 funding allocations prevent accountability and transparency over the government's approach to selecting councils for funding.

In July 2017, the NSW Government established priorities for how the remaining SCF funds should be used. The funds were to be used to cover costs associated with councils' legal action relating to amalgamation, to reimburse costs incurred by councils that were unable to merge but had participated constructively in the merger process, and to fund community initiatives in council areas that had amalgamated in 2016.

OLG developed the initial grant program guidelines between July 2017 and September 2017 in consultation with the then Premier, Deputy Premier and Minister for Local Government and their staff. These were then revised in June 2018. Neither version of the guidelines made reference to the type of projects that were to be prioritised and did not set out how the funds should be administered in accordance with these priorities. The guidelines also did not include information about how councils and projects would be selected and made no provision for an assessment of identified projects against the criteria for eligible projects in the guidelines. OLG did not publish the guidelines and the process adopted by the Premier, Deputy Premier and Minister for Local Government to select projects did not reference the criteria for eligible projects in the guidelines. The selection of councils and funded projects resulted in 96 per cent of available funding being allocated to projects in coalition-held state government electorates.

The Minister for Local Government was responsible for distributing the SCF funds but only approved funding for projects at two of 24 councils, both paid in November 2017. Projects at the other 22 councils were identified by the former Premier and Deputy Premier between June 2018 and June 2019 in consultation with other coalition Members of Parliament and communicated to OLG through emails from Premier and Deputy Premier's staff. When making payments in response to email instructions from staff in the offices of the Premier, Deputy Premier and Minister for Local Government, OLG did not seek to ensure that identified projects were consistent with the guidelines and made payments to selected councils with little or no information to justify them. With the exception of the two funding allocations approved by the then Minister for Local Government, OLG also did not ensure that formal records were in place to document approval for the remaining 22 funding allocations.

Regional Cultural Fund

The assessment process that Create NSW used for the Regional Cultural Fund was robust and produced transparent and defensible recommendations to the then Minister for the Arts. However, the integrity of the approval process for funding allocations was compromised because the minister, in consultation with the then Deputy Premier, did not follow the recommendations of the independent assessment panel in multiple cases and the reasons for making changes were not documented by the minister's office or Create NSW.

All projects that received funding were assessed by Create NSW as eligible for funding under the program. An independent assessment panel assessed applications against the program objective and criteria. This process was designed in line with good practice in grants administration and was implemented consistently. The then Minister for the Arts, in consultation with the former Deputy Premier, did not follow the panel's recommendations for 22 per cent, or more than one in five, of the applications assessed for funding. Thirty-four applications that were recommended by the independent panel did not receive any funding. In the second funding round, seven of the top ten ranked applications were not funded.

The Minister for the Arts approved funding for 22 applications that were not recommended by the independent panel. This resulted in around $9.3 million being awarded to applicants that were not rated highest by the independent panel, including six applicants that received grants of $500,000 or more. Most did not meet one or more assessment criteria and received low ratings.

The then minister did not provide reasons for not approving funding in line with the recommendations of the panel. This did not breach any legislation or guidelines in New South Wales, but it compromised Create NSW's ability to demonstrate integrity and value for money in the RCF approval process. It creates a clear perception that factors other than the merits of the projects influenced funding decisions.

Create NSW's administration of the Regional Cultural Fund was based on relevant legislative requirements and good practice guidance. The objectives of the program were defined clearly and the guidelines and criteria were consistent with the program objectives. The governance and probity framework was appropriate for the size and nature of the program.

Appendix one – Response from agencies

Appendix two – List of funded projects - Stronger Communities Fund Round 2

Appendix three – List of funded projects - Regional Cultural Fund

Appendix four – About the audit

Appendix five – Performance auditing

 

Copyright notice

© Copyright reserved by the Audit Office of New South Wales. All rights reserved. No part of this publication may be reproduced without prior consent of the Audit Office of New South Wales. The Audit Office does not accept responsibility for loss or damage suffered by any person acting on or refraining from action as a result of any of this material.

 

Parliamentary reference - Report number #361 - released 8 February 2022.