The function of IA within CAA is to provide a high quality, responsive and value adding activity in the review of financial, operational and system controls and processes by way of:

• Assisting with the formation of the annual IA Plan in line with the CAA's risk profile,
• Evaluating and making observations on the efficiency and effectiveness of internal controls to address risk,
• Conducting special investigative reviews at the request of the ARMC,
• Attending quarterly meetings of the ARMC to report on findings,
• IA will report to the ARMC and to CAA’s Chief Executive through the Chief Financial Officer and/or delegate.

The Chief Financial Officer and/or delegate will have an active day-to-day relationship with IA dealing with such things as timeliness, quality, resourcing, background, consistency and ultimately assisting the business in implementing agreed actions arising from the reviews.

The base services to be provided by the successful tenderer will include:

Audit Planning

• Development of a rolling three-year strategic IA plan focused on CAA risk profile; reviewed annually or as needed, and
• Participation in a review of the content of the IA Plan at the June meeting of the ARMC in each year.

Special Investigative Reviews

• Carrying out specific investigative reviews as requested by the ARMC.

Fieldwork

• Perform the reviews in accordance with the approved detailed scope for each project, and
• Follow up agreed actions outstanding from prior periods.

Reporting

• Prepare individual project reports at the conclusion of each project in accordance with the approved project scope and the deadlines set for that project,
• Prepare written reports for the ARMC on the IA Plan activities undertaken and details of any Special Investigative Reviews during the period and the status of outstanding agreed actions from any previous period with respect to the IA Plan and the Special Investigative Reviews.

External Audit

• Co-operating fully with CAA external auditors (Auditor-General).

Industry Developments

• Ensuring that CAA is updated on a regular basis (whether by inclusion at monthly meetings or separately) with respect to professional developments concerning governance, risk and internal audit management issues.

Resources

• Details of senior team member responsible for CAA IA and time commitment proposed,
• List of proposed team structure including CVs of key people, setting out experience,
• Proposed approach to resourcing, including use of interstate or specialist resources (where applicable).

Experience

• Outline of local internal audit experience (particularly with experience within a legal environment),
• Outline of relevant IT experience and other relevant specialisations.

Communication and performance

• Management of relationship and communication with CAA,
• Outline the processes to review and assess the performance of IA.

Independence

• Confirmation of independence and approach to conflicts.

IA Methodology

• Alignment with risk Management,
• How quality of deliverables is managed,
• How value can be added through internal audit.

External Audit

• Coordination with external audit on an ongoing basis.