24.02.2013 Views

CRA Annual Report to Parliament 2011-2012 (PDF - Agence du ...

CRA Annual Report to Parliament 2011-2012 (PDF - Agence du ...

CRA Annual Report to Parliament 2011-2012 (PDF - Agence du ...

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

epresentative of the Office of the Audi<strong>to</strong>r General, each attend Audit Committee meetings. The Audit Committee was<br />

established in 1999 and is composed of five external members who are independent of the <strong>CRA</strong>.<br />

Agency Management Committee - As the sole decision-making Committee in the <strong>CRA</strong>, this committee oversees program<br />

development and delivery, as well as the day-<strong>to</strong>-day business operations of the <strong>CRA</strong> and all associated risks. The Committee<br />

reviews, approves, and moni<strong>to</strong>rs the corporate risk profile.<br />

Chief Audit Executive - The Chief Audit Executive and Assistant Commissioner, Corporate Audit and Evaluation Branch,<br />

reports directly <strong>to</strong> the Commissioner and provides, through an effective internal audit function, independent and objective<br />

assurance on the <strong>CRA</strong>’s risk management, internal control, and governance practices. In this role, the Chief Audit Executive is<br />

a member of the CEO/CFO Certification Steering Committee and attends meetings of the Audit Committee.<br />

Chief Risk Officer - The Chief Risk Officer and Assistant Commissioner of the Enterprise Risk Management Branch reports<br />

directly <strong>to</strong> the Commissioner and oversees the <strong>CRA</strong>’s enterprise risk management function designed <strong>to</strong> provide sound risk<br />

information for use in decision-making at the corporate, operational, and project levels.<br />

Internal Controls Division - The Internal Controls Division within the Finance and Administration Branch supports the <strong>CRA</strong>’s<br />

efforts <strong>to</strong> design and maintain an effective and integrated system of ICFR by documenting and testing, in collaboration with<br />

information technology and business process control owners, the adequacy of ICFR and reporting results <strong>to</strong> the CEO/CFO<br />

Certification Steering Committee, the Commissioner, and the Audit Committee of the Board. If applicable, the Division also<br />

reports information on action plans <strong>to</strong> strengthen controls.<br />

Senior managers - Senior managers in charge of services and program delivery are responsible for maintaining and<br />

reviewing the effectiveness of their system of ICFR falling within their mandate.<br />

2.2 Key measures taken by the <strong>CRA</strong><br />

The <strong>CRA</strong> also helps <strong>to</strong> ensure its control environment remains effective in mitigating financial reporting risks by promoting<br />

ethical con<strong>du</strong>ct and through upholding its commitment <strong>to</strong> competence, its governance and organization structure, its<br />

enterprise risk management function, and the systems and processes that help ensure relevant information is<br />

communicated <strong>to</strong> appropriate indivi<strong>du</strong>als accurately and on a timely basis. Key elements and activities are listed below.<br />

<strong>CRA</strong>’s Code of Ethics and Con<strong>du</strong>ct.<br />

Performance management system that formalizes management’s commitment <strong>to</strong> values and ethics.<br />

An integrity framework composed of policy instruments, programs, and processes designed <strong>to</strong> reinforce a culture of<br />

integrity.<br />

Competency based human-resources system.<br />

A dedicated division on internal control.<br />

An independent and knowledgeable audit committee that is actively involved in overseeing the <strong>CRA</strong>’s ICFR.<br />

An internal audit function and risk-based audit plan.<br />

An integrated enterprise risk management function, led by the Chief Risk Officer who reports directly <strong>to</strong> the<br />

Commissioner/CEO.<br />

A formal information technology strategy that guides information technology sustainability and development.<br />

The Internal Disclosures Office which provides a confidential channel through which employees can disclose<br />

wrongdoing.<br />

ANNUAL REPORT<br />

<strong>2011</strong>-<strong>2012</strong><br />

CANADA REVENUE AGENCY

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!