Provision of internal audit services

The provision of internal audit services to a small, non-departmental public body

The internal audit function will be required to (i) analyse the governance, risk management and internal control system and establish a risk-based assurance programme; (ii) identify and evaluate the controls which are established to achieve objectives in the most economical, effective and efficient manner; (iii) report findings and conclusions and, where appropriate, make recommendations for improvement; (iv) provide an opinion on the controls under review; and (v) provide assurance based on evaluating the governance, risk management and internal control system within the organisation as a whole.

For each year from 1 April to 31 March the following year, the internal audit team will be responsible for proposing a programme of work and submitting it for approval to the ARC that focuses on areas of specific business risk that WICS faces regularly. This focus will include compliance with internal and external WICS regulations, particularly in line with the Scottish Public Finance Manual (SPFM).

Annual audit assurance is provided to the Accountable Officer through the professional opinion of the Head of Internal Audit (or equivalent) on the adequacy and effectiveness of the organisation's governance, risk management, and internal control systems.

The internal audit team will be expected to attend ARC meetings, where they will present an annual work plan for approval, the scope and findings of work conducted by the internal audit team and an annual audit report and opinion. The Head of the Internal Audit team should be available to the Chair of the ARC to discuss any matters of concern.