PDF - 4.73MB - Australian Sports Anti-Doping Authority

Management and accountability ASADA ANNUAL REPORT 2012:13Internal auditsOur internal audit services are provided by Deloitte and monitored by the Audit Committee.The 2011–14 Strategic Internal Audit Plan which was endorsed by the Audit Committee addresses:> identified strategic risks> the Fraud and Corruption Control Plan> the results of the Certificate of Compliance processes> feedback from the executive team and the Senior Management Group.During 2011–12, the Audit Committee endorsed the inclusion of ISO 9001 Quality Management Compliance inthe scope of all audits conducted by Deloitte. This complements a rolling program of audits conducted internally.The following internal audits were conducted during 2012–13:> financial controls — revenue and receivables> business continuity management.Fieldwork was scheduled to commence in July 2013 on a review of ASADA’s IT Security. This was conducted aspart of the 2012–13 audit program.Records managementASADA’s records management practices comply with the Archives Act 1983 and are reviewed regularly to maintaincompliance. In the reporting period, ASADA upgraded its recordkeeping software to ensure the preservation ofdigital records.Authorisation for our Records Authority was granted from the National Archives of Australia. The Records Authoritysets out the requirements for keeping or destroying records for the core business areas of Anti-Doping RuleViolation Management, Detection, Deterrence, Enforcement and Medical Advisory Committee Management.The Records Authority is based on the identification and analysis of our business and takes into account legaland administrative records management requirements, and the interest of stakeholders, ASADA and the NationalArchives of Australia. This Records Authority is used in conjunction with the Administrative Function DisposalAuthority for all records that need to be retained as national archives and specifies the minimum length of timethat all records need to be kept.We completed the Personal Information Digest, which requires Australian Government agencies subject tothe Privacy Act to maintain and record the classes of personal information they hold and submit a copy to theAustralian Information Commissioner.In September 2012 we completed and submitted the second annual assessment of our information and recordsmanagement capability using Check-up 2.0. Our results indicate that the risk index for strategy and practice arevery good and the digital records management scores were at the ‘very good’ to ‘excellent’ levels.Quality managementCompliance with ISO 9001ASADA is committed to continual improvement of its management framework to support its purpose. Inaddition to its legislative obligations, ASADA voluntarily participates in the ISO 9001 quality management systemcertification program.As part of ASADA’s annual certification audit program, a re-certification audit of the quality management systemwas conducted in March 2012 based on the ISO 9001 Standard. The successful completion of this audit resultedin ASADA being re-certified as meeting the requirements of ISO 9001. The three-year period of certification is due61