OFFICIAL: SENSITIVE
Open matters
1.
Meeting & agenda item: 14 March 2024, Joint Audit & Risk Committees, 7.1 Audit
Management Report.
Summary: Board Secretariat to liaise with new Audit and Risk Committee Chair and
Of ice of the CEO, regarding attendance of Commonwealth Ombudsman at future
meeting following his report on Administrative Appeals Tribunal.
Responsible: Board Secretariat
Recommended status: Open
Ombudsman report on Administrative Appeals Tribunal is expected to be delivered
by the end of September 2024.
2.
Meeting & agenda item: 6 June 2024
, Audit & Risk Commit ees, 2.1 In camera –
Commit ee Members
Summary: Board Secretariat to organise for the Chair, the CEO and Mr Swainson to
meet with the ANAO to discuss historical findings in the second week of July.
Responsible: Board Secretariat
Recommended status: Open
Meeting to be rescheduled at a future date, following advice from the 4 September
2024 Audit and Risk Commit ee meeting.
3.
Meeting & agenda item: 6 June 2024, Joint Audit & Risk Committees, 4.4 Hard
Close Financial Statements
Summary: s 47B - Cth-state relations; s 47C - deliberative process; s 47E(d) - operations on agency
Responsible: Samuel Porter
Recommended status: Open
Management are currently considering and wil provide a response in Q2 FY 24/25
4.
Meeting & agenda item: 6 June 2024, Joint Audit & Risk Commit ees, 6.4 Annual
Strategic Risk Review FY 2024-25
Summary: Management to confirm the Agency’s cyber security insurance cover.
Responsible: Samuel Porter
Recommended status: Open
Management are currently considering and wil provide a response in Q2 FY 24/25.
5.
Meeting & agenda item: 6 June 2024, Joint Audit & Risk Commit ees, 6.4 Annual
Strategic Risk Review FY 2024-25.
Summary: Mr Porter to bring a paper to Board or Committee about cyber security.
Responsible: Samuel Porter
Recommended status: Open
OFFICIAL: SENSITIVE
3.2.3
DOCUMENT 2
OFFICIAL: SENSITIVE
NDIA Audit Commit ee meeting of 12 September 2023
The contents of this document are OFFICIAL: SENSITIVE
Agenda Item:
3.2
Agenda Item:
Matters arising and ongoing
Paper Type:
For Decision
SLT Sponsor:
Debbie Mitchell, DCEO Governance, Risk and Integrity
Draft resolution:
The Commit ee noted the Matters Arising and Ongoing report which
identifies:
• Matters to be closed at the meeting, and
• Open matters,
and agreed to close the matters proposed to be closed.
Matters to be closed at meeting
1.
Meeting & agenda item: 24 May 2023, Audit Committee,
4.2 Going Concern Update
Summary: COO Samuel Porter to undertake a sensitivity analysis of the financial
projections and provide further advice to the Commit ee out of session.
Responsible: Samuel Porter
Recommended status: Propose to Close
Paper circulated to Commit ee members out of session on 14 August 2023.
2.
Meeting & agenda item: 24 May 2023, Audit Commit ee,
7. Annual review of
Accountable Authority Instructions
Summary: COO Samuel Porter to amend the wording on page 20 of the AAIs (Section
12 – Financial Authorisations) to clarify the maximum spendings for delegates within their
allocated budget.
Responsible: Samuel Porter
Recommended status: Propose to Close
The Board endorsed the 2023 Accountable Authority Instructions and Financial
Authorisations at the 28 July 2023 Board Meeting, as amended.
3.
Meeting & agenda item: 24 May 2023, Audit Commit ee, 6.1 Internal Audit Management
Report
Summary: Mr Campbell to review the audit activities with a view to separating those
which are PACE dependent.
Responsible: Geoff Campbel
Recommended status: Propose to Close
The Agency has reviewed its audit activities and has separated those which are PACE
dependent.
OFFICIAL: SENSITIVE
Matters arising report
3.2.1
OFFICIAL: SENSITIVE
NDIA Audit Commit ee meeting of 12 September 2023
Open matters
Nil
OFFICIAL: SENSITIVE
Matters arising report
3.2.2
DOCUMENT 3
OFFICIAL: SENSITIVE
NDIA Risk Commit ee meeting of 27 November 2024
The contents of this document are OFFICIAL: SENSITIVE
Agenda Item:
3.2
Agenda Item:
Matters arising and ongoing
Paper Type:
For Decision
SLT Sponsor:
Debbie Mitchell, DCEO Governance, Risk & Integrity
Draft resolution:
The Commit ee noted the Matters Arising and Ongoing report which
identifies:
• Matters to be closed at the meeting, and
• Open matters,
and agreed to close the matters proposed to be closed.
Matters to be closed at meeting
1.
Meeting & agenda item: 14 September 2023, Risk Commit ee, 4.1 Chief Risk Officer
Report
Summary: Management to correct the errors noted in the Fraud and Corruption Control
Plan before it progresses to Board.
Responsible: Debbie Mitchell
Recommended status: Propose to Close
Completed.
2.
Meeting & agenda item: 14 September 2023, Risk Commit ee,
4.5 3P Update
Summary: Board Secretariat to include a visit to the NCC on the forward Board calendar.
Responsible: Board Secretariat
Recommended status: Propose to Close
Board Secretariat has noted the request for longer visits and wil schedule a visit to the
NCC in March 2023.
3.
Meeting & agenda item: 14 September 2023, Risk Commit ee, 5. Meeting close
Summary: Board Secretariat to ensure that al papers are correctly labelled with a
corresponding agenda item number.
Responsible: Board Secretariat
Recommended status: Propose to Close
Completed.
4.
Meeting & agenda item: 14 September 2023, Risk Commit ee, 4.2 Risk Management
Strategy
Summary: Management to pass on the Board’s gratitude and well wishes to the two
NDIA staff members assisting the Barkley Tableland fires.
Responsible: Scott McNaughton
OFFICIAL: SENSITIVE
Matters arising report
3.2.1
OFFICIAL: SENSITIVE
NDIA Risk Commit ee meeting of 27 November 2024
Recommended status: Propose to Close
Completed.
5.
Meeting & agenda item: 14 September 2023, Risk Commit ee, 4.1 Chief Risk Of icer
Report
Summary: Ms Kitsa Papadopoulos, GM Fraud Fusion Taskforce, to attend the next
Commit ee meeting to present on Agency activities in fraud space and impacts on
participants.
Responsible: John Dardo CC Scott McNaughton
Recommended status: Propose to Close
Integrity session being held on Monday 27 November 2023 with Risk Commit ee
members.
6.
Meeting & agenda item: 14 September 2023, Risk Commit ee, 4.1 Chief Risk Of icer
Report
Summary: Management to provide further detail on fraud cases in future papers.
Responsible: Debbie Mitchell
Recommended status: Propose to Close
Further detail included in Chief Risk Of icer Q1 2023–24 Report tabled on November
agenda at Item 4.1.
Open matters
1.
Meeting & agenda item: (Transferred to Risk Co) 23 November 2022, ICTD Commit ee,
2.8 Improving the Cyber Security Profile of NDIA Providers
Summary: Prepare a further paper on the background considerations and options for
improving the cyber security profile of NDIA providers.
Responsible: Transferred to Samuel Porter
Recommended status: Open
Chief Operating Of icer wil report back to the Risk Commit ee in the first meeting of
2024.
OFFICIAL: SENSITIVE
Matters arising report
3.2.2
DOCUMENT 4
OFFICIAL: SENSITIVE
NDIA Risk Commit ee meeting of 14 September 2023
The contents of this document are OFFICIAL: SENSITIVE
Agenda Item:
3.2
Agenda Item:
Matters arising and ongoing
Paper Type:
For Decision
SLT Sponsor:
Debbie Mitchell, PSM, DCEO Governance, Risk and Integrity
Draft resolution:
The Commit ee noted the Matters Arising and Ongoing report which
identifies:
• Matters to be closed at the meeting, and
• Open matters,
and agreed to close the matters proposed to be closed.
Matters to be closed at meeting
1.
Meeting & agenda item: 2 March 2023, Risk Commit ee,
4.6 Chief Counsel Report
Summary: Advise Risk Commit ee if the Agency provides training to planners on note
taking.
Responsible: Matt Swainson transferred to Scott McNaughton
Recommended status: Propose to Close
Matter has been superseded, refer to 24 May 2023 Risk Commit ee 3.2 Matters Arising
item (below).
2.
Meeting & agenda item: 24 May 2023, Risk Commit ee,
3.2 Matters Arising
Summary: DCEO Scott McNaughton to provide an update to the Risk Commit ee on the
steps the Agency is taking directly with staff and through PACE to ensure good quality
and appropriate note taking.
Responsible: Scott McNaughton
Recommended status: Propose to Close
Current actions taken directly with staff to ensure good quality and appropriate note
taking:
•
Frontline training is initial y delivered for all new starters (as previously reported to
Risk Commit ee).
•
Current quality assurance (QA) program for planning assesses the quality of a
random sample of plans each month. The QA program includes a question AIX01
“Has the interaction guide been fol owed on the participants record?” This question
assesses accuracy, appropriateness of language, inclusion of factual and relevant
information in interactions. It is noted the QA manual (for QA staff) also requires
specific interactions to reviewed to assess other QA questions.
•
Monthly QA results and trends are collating in reports and distributed by account
managers to each of the frontline teams involved in planning decisions.
OFFICIAL: SENSITIVE
Matters arising report
3.2.1
OFFICIAL: SENSITIVE
NDIA Risk Commit ee meeting of 14 September 2023
•
Additional y, any systemic trends from QA results are incorporated into continuous
improvement (CI) training modules for frontline staff. Historical focus areas have
included notes used to justify planning decisions.
•
As we transition to PACE, the Performance Management and Quality Learning team
has leveraged the ecosystem of knowledge (Communications, Knowledge
Management, and formalised Training), to shift this existing capability to the new
ways of working within the PACE system.
There are a range of PACE / 3Ps enhancement that wil further strengthen and improve
the quality and appropriateness of note taking, these include:
•
PACE case structure includes:
o
more structured data fields, reducing the volume of ‘free text’ interactions / notes
required to be entered.
o
guided workflows and embedded knowledge articles (guidance) that step staff
and partners through processes, including the information they need to capture
as notes.
•
PACE wil have an embedded Decision, Justification & Evidence framework that
provides a logical and consistent structure on the level of information required to be
recorded within a PACE case to support a decision.
•
PACE User Interface wil provide staff and partners with an opportunity to review
(and amend) information in correspondence, as the participant would receive it,
before it is sent.
•
PACE wil have a centralised location for all case notes and activities relating to that
case. These wil be displayed as a chronological timeline on both the case and the
related person account and improved audit logs wil capture staff who complete this
work.
3.
Meeting & agenda item: 24 May 2023, Risk Commit ee, 4.1 Chief Risk Of icer Report
Summary: DCEO Debbie Mitchell PSM and COO Samuel Porter to prepare an issues
paper for the Risk Commit ee regarding changes to debt recovery arrangements from an
audit and accounting perspective.
Responsible: Debbie Mitchell PSM
Recommended status: Propose to Close
A verbal update wil be provided as part of the Chief Risk Of icer Report at agenda item
4.1..
4.
Meeting & agenda item: 24 May 2023, Risk Commit ee, 4.2 Strategic Risks 2023/24
Summary: DCEO Debbie Mitchel PSM to include the treatment of cyber risk in the risk
mitigations against strategic risk 6, to be considered by the Board for approval as part of
the NDIA Corporate Plan.
Responsible: Debbie Mitchell PSM
Recommended status: Propose to Close
OFFICIAL: SENSITIVE
Matters arising report
3.2.2
OFFICIAL: SENSITIVE
NDIA Risk Commit ee meeting of 14 September 2023
s 47C s 47E(d)
Future State
Performance Management and Quality (PMQ) Branch (within Service Delivery) are
working with the PACE Design and Build team to transition Quality Assurance onto the
PACE system. This initiative is currently in the design phase. When completed on
system, it is anticipated that Quality Assurance findings wil be visible to delegates and
their line managers, and can be used to inform future decisions. It is anticipated that this
wil drive further improvement through facilitating coaching and learning opportunities.
Internal Audit are assisting PMQ to review how the Quality Assurance program wil
transition to PACE, and how good decision making on Reasonable and Necessary
Supports wil be measured. It is expected that this wil be completed close to the PACE
National expansion date.
6.
Meeting & agenda item: 24 May 2023, Risk Commit ee, 4.4 Chief Counsel Report
Summary: DCEO Debbie Mitchel PSM to provide advice to the Board on s 42 - legal professional privilege
7.
Meeting & agenda item: 24 May 2023, Risk Commit ee, 4.4 Chief Counsel Report
Summary: Chief Counsel Matt Swainson to provide advice to the Risk Commit ee on s 42 - lega
8.
Meeting & agenda item: (Transferred to Risk Co) 28 February 2023, ICTD Commit ee,
2.3 Claims Point of Sale
Summary: Approach Andrew Colvin for his view on what the assurance program for
design of CPOs should look like and report back to ICTD Commit ee before the next
meeting.
Responsible: Alex Stewart
Recommended status: Propose to Close
The C-POS Program raised this issue with the Chief Risk Of icer (CRO) within the
program’s steering commit ee. It was agreed that C-POS wil be on the Agency’s annual
OFFICIAL: SENSITIVE
Matters arising report
3.2.4
OFFICIAL: SENSITIVE
NDIA Risk Commit ee meeting of 14 September 2023
audit plan. The exact timing and engagement with external parties wil be determined as
part of that plan.
9.
Meeting & agenda item: 2 March 2023, Risk Commit ee, 4.1 Chief Risk Of icer Report
Summary: s 42 - legal professional privilege
10.
Meeting & agenda item: (Transferred to Risk Co) 28 September 2022, ICTD, 2.2 Digital
Update
Summary:. Provide a paper to the Risk Commit ee on how the payment architecture
could be optimised (i.e. if you were going to redesign the payments system what would
you do – including potential legislative change).
Responsible: Nicole Glazebrook Phoebe Thompson Samuel Porter
Recommended status: Propose to Close
The NDIS Review is looking at payments and the Board has been briefed on possible
recommendations.
Open matters
1.
Meeting & agenda item: (Transferred to Risk Co) 23 November 2022, ICTD Commit ee,
2.8 Improving the Cyber Security Profile of NDIA Providers
Summary: Prepare a further paper on the background considerations and options for
improving the cyber security profile of NDIA providers.
Responsible: Ian Frew Lyle Wells & Rebecca Falkingham Samuel Porter
Recommended status: Open
Chief Operating Officer will report back to the Risk Commit ee in the first meeting of
2024.
OFFICIAL: SENSITIVE
Matters arising report
3.2.5
DOCUMENT 5
OFFICIAL: SENSITIVE
The contents of this document are OFFICIAL: SENSITIVE
Meeting:
Audit and Risk Committee,
6 June 2024
Agenda Item:
3.3
Agenda Item:
Matters arising and ongoing
Paper Type:
For Decision
SLT Sponsor:
Debbie Mitchell, DCEO Governance, Risk & Integrity
Draft resolution:
The Commit ee noted the Matters Arising and Ongoing report which
identifies:
• Matters to be closed at the meeting, and
• Open matters,
and agreed to close the matters proposed to be closed.
Matters to be closed at meeting
1.
Meeting & agenda item: 14 March 2024, Joint Audit & Risk Commit ees,
4.1 Finance
Activity Update
Summary: Management to advise the Commit ees of any delays in responding to ANAO
requests.
Responsible: Debbie Mitchell
Recommended status: Propose to Close
Reporting on delays in responses to ANAO requests for information (RFIs) has been
incorporated into the Audit Management Report.
2.
Meeting & agenda item: 14 March 2024, Joint Audit & Risk Commit ees,
6.1 Chief Risk
Officer Report (Q2)
Summary: Management to provide clarification regarding the cohort term ‘children
without plans’ in relation to the HWL Ebsworth data breach.
Responsible: Debbie Mitchell
Recommended status: Propose to Close
The Chief Risk Officer Report Q2 2023–24 was amended to clarify this term for the 27
March Board meeting.
3.
Meeting & agenda item: 14 March 2024, Joint Audit & Risk Commit ee, 3.2 Audit & Risk
Commit ee Charter
Summary: Board secretariat to amend the charter to reflect:
•
Consistent use “Audit & Risk Commit ee” throughout
•
Consistent reference to PGPA Rule
•
Delete repeated dot point at section 5
•
Adjust “membership” to confirm that Board Chair cannot be a member (observer
only)
OFFICIAL: SENSITIVE
3.3.1
OFFICIAL: SENSITIVE
•
Adjust attendance to confirm that the Commit ee determines attendees, in
consultation with CEO
•
Adjust membership to minimum of 4, with quorum of 3
•
Include reference to ‘performance statements’ in ANAO section
Adjust Conflict of Interest section to reflect that, in rare occasions, members may not be
aware of a COI until they receive paper
Responsible: Board Secretariat
Recommended status: Propose to Close
Completed. Charter published on NDIA website and NDIA Board intranet (internal) page.
4.
Meeting & agenda item: 14 March 2024, Joint Audit & Risk Committees, 7.1 Audit
Management Report
Summary: Board Secretariat to distribute links to previous ANAO Board Governance
audits of Corporate Commonwealth Entities.
Responsible: Board Secretariat
Recommended status: Propose to Close
Provided to A&R Commit ee members on 14 March 2024.
5.
Meeting & agenda item: 14 March 2024, Joint Audit & Risk Commit ee, 7.2 ANAO audit
report on Management of Complaints by the NDIA
Summary: The Board secretariat to provide Dr Watt with previous Board papers
regarding complaints.
Responsible: Board Secretariat
Recommended status: Propose to Close
Paper loaded to Diligent for Dr Watt on 13 May 2024.
6.
Meeting & agenda item: 14 March 2024, Joint Audit & Risk Commit ees, 7.2 ANAO
audit report on Management of Complaints by the NDIA
Summary: Mr McGregor to update Agency response with feedback from the
Committees.
Responsible: Tom McGregor
Recommended status: Propose to Close
Response updated as per Commit ee’s feedback and provided to the ANAO.
7.
Meeting & agenda item: 14 March 2024, Joint Audit & Risk Commit ees, 8.1 ANAO
Audit Activity Update
Summary: ANAO to provide the date of the next Audit Commit ee Chairs forum to the
Chair.
Responsible: ANAO
Recommended status: Propose to Close
ANAO provided details to the Board Secretariat, these were passed along to the Chair.
OFFICIAL: SENSITIVE
3.3.2
OFFICIAL: SENSITIVE
8.
Meeting & agenda item: 14 March 2024, Joint Audit & Risk Commit ees, 6.2 Legal Risk
Report
Summary: Mr Swainson to s 42 - legal professional privilege
9.
Meeting & agenda item: 14 March 2024, Joint Audit & Risk Commit ees, 7.1 Audit
Management Report
Summary: Mr Sul ivan to engage with the Chair on the best format for the open audit
items report.
Responsible: Mark Sullivan
Recommended status: Propose to close
The draft report format is in final stages of drafting and wil shortly be considered by the
Senior Leadership Team (SLT). Following SLT consultation and agreement on format
and content, a penultimate version wil be discussed with the Chair, including the best
mechanism to finalise the report. It is expected that the report wil be finalised in Q4
2023–24.
Open matters
1.
Meeting & agenda item: 23 November 2022, ICTD Commit ee, 2.8 Improving the Cyber
Security Profile of NDIA Providers
(Transferred to Risk Co)
Summary: Prepare a further paper on the background considerations and options for
improving the cyber security profile of NDIA providers.
Responsible: Samuel Porter
Recommended status: Open
ETA 6 June 2024 meeting.
2.
Meeting & agenda item: 14 March 2024, Joint Audit & Risk Commit ees, 3.3 Commit ee
meeting dates and forward agenda
Summary: Board Secretariat to review proposed schedule against ANAO audit
milestones and organise a meeting with the Chair and management to discuss any
additional meeting requirements.
Responsible: Board Secretariat
Recommended status: Open
Ongoing – Board Secretariat working with CRO office to determine audit milestones to be
considered.
OFFICIAL: SENSITIVE
3.3.3
OFFICIAL: SENSITIVE
3.
Meeting & agenda item: 14 March 2024, Joint Audit & Risk Commit ees, 6.2 Legal Risk
Report
Summary: Mr Swainson to s 42 - legal professional privilege
4.
Meeting & agenda item: 14 March 2024, Joint Audit & Risk Commit ees, 7.1 Audit
Management Report
Summary: Board Secretariat to liaise with new Audit and Risk Commit ee Chair and
Of ice of the CEO regarding attendance of Commonwealth Ombudsman at future
meeting.
Responsible: Board Secretariat
Recommended status: Open
Board Secretariat liaising with OCEO and A&R Co Chair to determine appropriate
meeting.
OFFICIAL: SENSITIVE
3.3.4
DOCUMENT 6
OFFICIAL: SENSITIVE
The contents of this document are OFFICIAL: SENSITIVE
Joint Audit & Risk Committee meeting: 14 March 2024
Agenda Item:
3.5
Agenda Item:
Matters arising and ongoing
Paper Type:
For Decision
SLT Sponsor:
Debbie Mitchell, DCEO Governance, Risk &
Legal
Draft resolution:
The Commit ee noted the Matters Arising and
Ongoing report open matters, with no items
proposed to be closed.
Matters to be closed at meeting
Nil.
Open matters
1.
Meeting & agenda item: (Transferred to Risk Co) 23 November 2022, ICTD Commit ee,
2.8 Improving the Cyber Security Profile of NDIA Providers
Summary: Prepare a further paper on the background considerations and options for
improving the cyber security profile of NDIA providers.
Responsible: Transferred to Samuel Porter
Recommended status: Open
ETA 6 June 2024 meeting.
OFFICIAL: SENSITIVE
3.5.1
DOCUMENT 7
OFFICIAL: SENSITIVE
NDIA Audit Commit ee meeting of 27 November 2023
The contents of this document are OFFICIAL: SENSITIVE
Agenda Item:
6.2
Agenda Item:
Matters arising and ongoing
Paper Type:
For Decision
SLT Sponsor:
Debbie Mitchell, DCEO Governance, Risk & Integrity
Draft resolution:
The Commit ee noted the Matters Arising and Ongoing Report which
identifies:
• Matters to be closed at the meeting; and
• Open matters;
and agreed to close the matters proposed to be closed.
Matters to be closed at meeting
1.
Meeting & agenda item: 12 September 2023, Audit Commit ee, 4.1 Draft Annual
Financial Statements
Summary: Management to provide a briefing to the Audit Commit ee on the draft ANAO
finding regarding delegate decisions.
Responsible: Scott McNaughton CC Debbie Mitchell, Samuel Porter
Recommended status: Propose to Close
Paper was tabled at 24 October Board meeting.
2.
Meeting & agenda item: 12 September 2023, Audit Commit ee, 4.1 Draft Annual
Financial Statements
Summary: Management to amend the Annual Financial Statements (pages 54 and 66) in
line with the Commit ee’s feedback and provide an updated version for Board
consideration.
Responsible: Samuel Porter CC David Gifford
Recommended status: Propose to Close
Completed.
3.
Meeting & agenda item: 12 September 2023, Audit Committee, 7.1 Internal Audit
Management Report
Summary: Management to resubmit the Internal Audit Plan to the Audit Commit ee at its
next meeting.
Responsible: Debbie Mitchell
Recommended status: Propose to Close
Tabled on November agenda at Item 5.1.
Open matters
Nil.
OFFICIAL: SENSITIVE
Matters arising report
6.2.1
DOCUMENT 8
OFFICIAL: SENSITIVE
The contents of this document are OFFICIAL: SENSITIVE
Joint meeting of NDIA Audit & Risk Committees
Minutes
14 March 2024
11:00am – 3.30pm AEDT
Audit Committee
Dr Graeme Innes AM, Chair
Dr Denis Napthine AO
Ms Estelle Pearson
Ms Maryanne Diamond AO
Ms Meredith Al an
Risk Committee
Ms Maryanne Diamond AO, Chair
Dr Denis Napthine AO
Mr Kurt Fearnley AO
Ms Meredith Al an
Board members
Mr Mark Darras
Dr Peta Seaton AM
Dr Richard Fejo
Management representatives
Ms Rebecca Falkingham, Chief Executive Officer
Ms Debbie Mitchell PSM, DCEO, Governance, Risk & Legal
Mr Samuel Porter, DCEO Enabling Services & Chief Operating Officer
Ms Corri McKenzie, DCEO Service Design & Improvement - Item 5.1
Mr David Gifford, Scheme Actuary - Item 5.1
Mr Scott McNaughton, DCEO Service Delivery - Item 5.1
Mr John Dardo, DCEO Integrity Transformation & Fraud Fusion Taskforce - Item 6.3
Other attendees
Mr Mark Sullivan, GM Audit & Risk Division
Mr Matthew Curtis, BM Ecosystem Reform & Governance (Secretariat)
Mr Mick Turner, EO to Board Chair
Ms Alexandra Collins, Executive Director, Performance Audit Services Group, ANAO
OFFICIAL: SENSITIVE
Minutes
1
OFFICIAL: SENSITIVE
Minutes – NDIA Joint Audit & Risk Committee meeting of 14 March 2024
Ms Lesa Craswell, A/g Group Executive Director, ANAO
Ms Prue Gordon, Senior Director, Performance Statements Audit Services Group, ANAO
Mr Chris Breitkreuz, Chief Financial Officer – Item 4.1
Dr Ian Watt AC, Specialist Advisor to the Commit ee – Item 6.2 onwards
Mr Matthew Swainson, Chief Counsel – Item 6.2
Mr Tom McGregor, General Counsel (Corporate) – Item 6.2
Apologies
Nil
1. In Camera
The Audit & Risk Committees (the Committees) held an in camera session at the start of the
meeting.
2. Meeting open
2.1 Chair’s welcome, Acknowledgment to Country and apologies
Management and other standing attendees joined the meeting.
The Chair of the Audit Commit ee, Dr Innes, welcomed attendees to the meeting at 11.35am
AEDT and provided an Acknowledgment of Country.
Dr Innes advised that it was agreed with the Risk Committee Chair, Ms Maryanne Diamond,
he would Chair this joint meeting of the Audit and Risk Committees.
3. Administration
3.1 Declarations of material interests
The Chair noted there were no updates to the Commit ees members’ declarations of
material interests.
Other Board members in attendance noted the following declarations:
• s 47F
3.2 Audit & Risk Committee Charter
Ms Mitchell and Mr Curtis provided an overview of this item, as set out in the paper, in
particular noting the draft charter is an amalgam of the current Audit and Risk Charters,
which are based on the model Audit charter provided by the Department of Finance, with
Agency-specific requirements incorporated.
The Committees discussed the draft charter and provided feedback to management
regarding the sections of the charter that deal with commit ee membership restrictions and
numbers, quorum, principles of at endance and conflict of interest.
In relation to conflict of interest, the ANAO drew the Committees’ attention to a related
recommendation arising in a recent performance audit.
OFFICIAL: SENSITIVE
Minutes
2
OFFICIAL: SENSITIVE
Minutes – NDIA Joint Audit & Risk Committee meeting of 14 March 2024
The Committee welcomed the Board Chair and CEO’s advice that conflict of interest
arrangements have been significantly strengthened as a result of enhancements to the
approach to Board member conflict of interest processes.
Action 1: Board secretariat to amend the charter to reflect:
• Consistent use “Audit & Risk Committee” throughout
• Consistent reference to PGPA Rule
• Delete repeated dot point at section 5
• Adjust “membership” to confirm that Board Chair cannot be a member (observer
only)
• Adjust attendance to confirm that the Committee determines attendees, in
consultation with CEO
• Adjust membership to minimum of 4, with quorum of 3
• Include reference to ‘performance statements’ in ANAO section
• Adjust Conflict of Interest section to reflect that, in rare occasions, members may not
be aware of a COI until they receive paper.
Resolution: The Committees endorsed the progression of the draft Audit and Risk
Commit ee Charter to the Board subject to the requested amendments being incorporated.
3.3 Committee meeting dates and forward agenda
The Chair introduced the item, and provided an overview, noting the timing of proposed
meetings may not align with ANAO audit responsibilities and requirements.
Action 2: Board Secretariat to review proposed schedule against ANAO audit milestones and
organise a meeting with the Chair and management to discuss any additional meeting
requirements.
The Committees noted the proposed dates and that there may be a requirement to hold out
of session meetings to respond to ANAO audit reports.
3.4 Minutes of the Audit & Risk Committee meetings held on 27 November 2023 &
Minutes of the OOS Audit Committee meeting of 18 December 2023
The Committees approved the minutes of the Audit Committee and Risk Commit ee
meetings held on 27 November 2023 and the OOS Audit Commit ee minutes of
18 December 2023.
3.5 Matters arising
The Committees noted the matters arising report for March 2024.
4. Financial Reporting
4.1 Finance Activity Update
Mr Breitkreuz joined the meeting.
Mr Breitkreuz introduced the item and gave an overview of the key matters for the
Commit ees’ consideration, as set out in the paper.
The Committees discussed the Finance Activity Update in particular:
• status and future arrangements for in-kind contributions in the context of proposed
scheme reforms, particularly foundational supports
OFFICIAL: SENSITIVE
Minutes
3
OFFICIAL: SENSITIVE
Minutes – NDIA Joint Audit & Risk Committee meeting of 14 March 2024
• what can be learnt from reforms to other Commonwealth policy and service delivery
agencies
• changes to providing responses to the ANAO and the Committees’ visibility of any
delays.
Management and the ANAO confirmed there have been no delays in provision of information
in relation to the current interim Audit.
Action 3: Management to advise the Committees of any delays in responding to ANAO
requests.
The Committees noted the Finance Activity Update.
Mr Breitkreuz left the meeting.
5. Performance Reporting
5.1 Performance Activity Update
Mr Gif ord, Ms McKenzie & Mr McNaughton joined the meeting.
Mr Gifford and Mr Porter took the paper as read, noting the paper sets out the Agency’s
performance measures and the current assessed measures.
The Committees noted the Performance Activity Update.
Mr Gif ord, Ms McKenzie & Mr McNaughton left the meeting.
6. Risk Oversight and Management
6.1 Chief Risk Officer Report (Q2)
Ms Mitchell and Mr Sullivan provided an overview of the key matters for the Committees’
consideration, as set out in the paper, with particular reference to:
• cyber security risks
• a small decrease in risks in tip offs in quarter 2
• the increase in operational risks as an expected result of the Agency organisational
restructure
s 47C deliberative process; s 47E(d) operations of agency
• emergency management and the establishment of the crisis coordination branch.
The Committees discussed the current status of legal work s 42 - legal professional privilege
Action 4: Management to provide clarification regarding the cohort term ‘children without
plans’ in relation to the HWL Ebsworth data breach.
Resolution: The Committees agreed that the Q2 CRO Report is an accurate account of
NDIA risks and controls, and to remit relevant content to the next NDIA Board meeting.
OFFICIAL: SENSITIVE
Minutes
4
OFFICIAL: SENSITIVE
Minutes – NDIA Joint Audit & Risk Committee meeting of 14 March 2024
The Committees endorsed the proposed cyber security key risk indicators for Strategic Risk
6 – Scheme Integrity for submission to the NDIA Board.
Ms Falkingham and Ms Collins left the meeting.
The Committees adjourned for lunch at 12:50pm and returned at 1:20pm. Dr Fejo and
Mr Sullivan rejoined the meeting at item 6.3.
6.2 Legal Risk Report
Ms Craswell left the meeting.
s 42 - legal professional privilege
Ms Falkingham rejoined the meeting.
Mr McGregor and Mr Swainson left the meeting.
6.3 Integrity Update
Mr Dardo joined the meeting.
Mr Dardo introduced the item and provided an overview of key highlights set out in the
paper.
The Committees discussed the engagement with the sector on integrity issues, the 24-hour
payment delay and the parameters for the use of cash within the Scheme, particularly in
relation to self-management.
The Committees noted the Integrity Update.
Ms Collins rejoined the meeting.
Mr Dardo left the meeting.
OFFICIAL: SENSITIVE
Minutes
5
OFFICIAL: SENSITIVE
Minutes – NDIA Joint Audit & Risk Committee meeting of 14 March 2024
7. Internal Control Framework
7.1 Audit Management Report
Ms Craswell rejoined the meeting.
Ms Mitchell introduced the item and provided an overview of the key mat ers for the
Commit ees consideration, as set out in the paper.
The Committees discussed the proposed Board Governance audit with the ANAO, in
particular the approach to the audit, timing and previous Board Governance audits within the
Commonwealth.
The Committees discussed the action items from ANAO audits, internal audits and the
Commonwealth Ombudsman and the role of the ANAO in tracking implementation of
recommendations. The Commit ees were pleased to see the Agency is preparing a review of
open audit items which will be provided to the new Audit and Risk Committee at a future
meeting.
The CEO advised the Commonwealth Ombudsman is pleased with the Agency’s
implementation of Ombudsman recommendations and the Committees welcomed the
opportunity to hear from the Ombudsman at a future meeting.
Action 7: Board Secretariat to distribute links to previous ANAO Board Governance audits of
Corporate Commonwealth Entities.
Action 8: Mr Sullivan to engage with the Chair on the best format for the open audit items
report.
Action 9: Board Secretariat to liaise with new Audit and Risk Committee Chair and Office of
the CEO regarding attendance of Commonwealth Ombudsman at future meeting.
7.2 ANAO audit report on Management of Complaints by the NDIA
Mr McGregor joined the meeting and provided an overview of the item, noting that overall,
the audit report found the Agency’s practice of complaints management as highly effective.
The Committees discussed best practice, which other organisations the NDIA should
benchmark itself against and the Agency’s efforts to embed continuous improvement into our
operating framework.
The ANAO advised the Commit ees the ANAO encourages entities to respond to Audit
report recommendations with the terminology agree or disagree, rather than agree in
principle.
Action 10: The Board secretariat to provide Dr Watt with previous Board papers regarding
complaints.
Action 11: Mr McGregor to update Agency response with feedback from the Committees.
The Committees noted:
- The ANAO proposed performance audit report on the Management of Complaints by
the NDIA.
- The NDIA wil engage with the ANAO on editorial matters.
Resolution: The Committees endorsed the proposed response to the Acting Auditor-
General subject to amendments discussed.
OFFICIAL: SENSITIVE
Minutes
6
OFFICIAL: SENSITIVE
Minutes – NDIA Joint Audit & Risk Committee meeting of 14 March 2024
8. External Audit Activity
8.1 ANAO Audit Activity Update
Ms Collins, Ms Gordon and Ms Craswell provided an overview of the key matters for the
Commit ees awareness and consideration, as set out in the paper.
Ms Craswell and Ms Collins advised the ANAO wil be issuing a draft Annual Audit Plan
which has been designed in light of the significant reforms occurring in response to the NDIS
Review and the Disability Royal Commission. The ANAO welcomes advice on the draft Audit
Plan with regard to the impact of reform work and the appropriateness of planned audits in
the next 18 months.
The Committees discussed the ANAO’s engagement with other agencies regarding AI.
Action 12: ANAO to provide the date of the next Audit Committee Chairs forum to the Chair
The Committees noted the ANAO Audit Activity Update.
9. Other Business
10. Meeting close
The meeting closed at 3:01pm.
OFFICIAL: SENSITIVE
Minutes
7
DOCUMENT 9
OFFICIAL: SENSITIVE
The contents of this document are OFFICIAL: SENSITIVE
Minutes of Audit & Risk Committee
Thursday 6 June 2024
12.00pm – 4.00pm AEST – Dandenong / MS Teams
Attendance
Committee members
Dr Graeme Innes AM, Chair
Ms Maryanne Diamond AO, Deputy Chair
Ms Meredith Allan
Mr Mark Darras
Dr Denis Napthine AO
Board members
Mr Kurt Fearnley AO
Dr Richard Fejo
Management representatives
Ms Rebecca Falkingham, CEO
Mr Matthew Swainson, A/g DCEO Governance, Risk & Legal / Chief Counsel – all items
except in camera
Mr Samuel Porter, DCEO Enabling Services / COO – all items except in camera
Mr Mark Sullivan, GM Audit & Risk Division – all items except in camera, 4.1, 4.2
Mr Chris Breitkreuz, Chief Financial Officer – Items 4.1, 4.2, 4.3 & 4.4
Mr David Gifford, Scheme Actuary – Items 5.1 & 6.5
Ms Corri McKenzie, DCEO Service Design & Improvement – Item 5.1
Mr Scott McNaughton, DCEO Service Delivery – Item 5.1
Mr John Dardo, DCEO Integrity Transformation & Fraud Fusion Taskforce – Item 6.3
Other attendees
Dr Ian Watt AC, Specialist Advisor
Ms Ilana Idrus, Director Board & Governance (Secretariat) – all items except in camera
Mr Mick Turner, EO to Board Chair
Observers – all items except in camera
Ms Lesa Craswell, A/g Group Executive Director, ANAO – all items except in camera
Ms Alexandra Collins, Executive Director, Performance Audit Services Group, ANAO – all
items except in camera
Ms Prue Gordon, Senior Director, Performance Statements Audit Services Group, ANAO –
all items except in camera
Ms Sophie Capel, Director, ANAO
Ms Rory Tredinnick, Performance Analyst, ANAO
OFFICIAL: SENSITIVE
1
OFFICIAL: SENSITIVE
The Minutes are presented in the order that items were discussed.
1.
Meeting open
1.1 Acknowledgement of Country
On behalf of the Committee, the Chair acknowledged the Traditional Owners and
Custodians of the Country throughout Australia, in particular the Bunurong people whose
lands the Committee was meeting on in Dandenong.
1.2 Chair’s welcome and open
The Chair opened the meeting at 11:25am and welcomed members and management to the
meeting.
2.
In camera
2.1 In camera – Committee Members
The Committee held an in camera session.
Dr Fejo joined the meeting.
Dr Watt joined the meeting.
Mr Fearnley joined the meeting.
Action 1: Board Secretariat to organise for the Chair, the CEO and Mr Swainson to meet with
the ANAO to discuss historical findings in the second week of July.
3.
Administration
Mr Porter and Mr Swainson joined the meeting.
Ms Craswell, Ms Collins, Ms Gordon, Ms Capel and Ms Tredinnick joined the meeting.
3.1 Declarations of material interests
The Chair noted there were no updates to the members’ declarations of material interests.
3.2 Minutes of the Audit & Risk Committee
The Committee endorsed the minutes of the meetings of 14 March 2024 and 24 April 2024
(Out of Session).
3.3 Matters arising
The Committee noted the matters arising report for June 2024, approving the closure of the
items proposed to be closed.
4.
Financial Reporting
4.1 Finance Activity Update
Mr Breitkreuz joined the meeting.
Mr Porter and Mr Breitkreuz introduced the paper and provided an overview of the key
matters set out in the paper, in particular that the soft close process did not identify any
particular concerns and noting the audit updates are also covered by item 7.1.
The Committee noted the paper and confirmed the timeline for the preparation of the
financial statements for the Committee and Board in the discussion of the hard close
financial statements.
OFFICIAL: SENSITIVE
2
OFFICIAL: SENSITIVE
4.2 Going Concern Assessment
Mr Breitkreuz provided an overview of the paper noting the Agency does not propose to
change the assessment for going concern for FY2023 -24.
The Committee discussed the assessment and the reasoning underpinning the sensitivity
analysis to reassure the Committee in accepting that no change in the assessment was
necessary.
4.3 Change to Accounting Standards
Mr Breitkreuz introduced the paper and noted that there are no significant changes for the
Agency as a result of the new accounting standards as the changes are already being
implemented or do not apply to the Agency.
The Committee discussed paper and sought clarification on the provisions regarding leases.
Mr Sullivan joined the meeting.
4.4 Hard Close Financial Statements
s 47B - Cth-state relations; s 47C - deliberative process; s 47E(d) - operations of agency
The Committee clarified timing for the sign off of the financial statements.
Ms Craswell clarified the role of the ANAO in financial statements which varied from what is
set out in some parts of the paper.
Action 2: Management to draft letter for the Board Chair to DSS raising the concern of the
WA payment deficit.
Mr Breitkreuz left the meeting.
5.
Performance Reporting
5.1 Performance Activity Update
Mr Gifford, Ms McKenzie and Mr McNaughton joined the meeting
Mr Gifford introduced the paper and gave an overview of the Annual Performance
Statements update as set out in the paper, noting the variances are consistent with the
previous quarter. Mr McNaughton provided the Committee with an update on the
performance against the Participant Service Guarantee (PSG) metrics.
The Committee discussed the Service Delivery remediation work and its impact on the
performance metrics and the duplication of the participant satisfaction metric in both
programs.
OFFICIAL: SENSITIVE
3
OFFICIAL: SENSITIVE
Mr Gifford, Ms McKenzie and Mr McNaughton left the meeting.
6.
Risk Oversight and Management
6.1 Chief Risk Officer Report (Q3)
Mr Sullivan introduced the paper and gave an overview of the key insights set out for the
Committee’s consideration, including the improvement in the risk profiles, the rebaselined
risk register for 3P and the initial compliance assessment against the new Fraud and
Corruption control framework and next steps to bring the Agency into compliance.
The Committee discussed the reasons for the rebaselining of the 3P program, the activities
to improve the agency’s approach to Conflict of Interest for staff and the timeline for the
Agency to meet the new Fraud and Corruption Control Register.
The Committee discussed Operation Royal, noting that affected participants had been
notified and the matter came before the courts in relation to the individual charged. The
Committee requested a more comprehensive report on Operation Royal at the next meeting.
Resolution:
The Committee agreed that the Q3 FY2023–24 Chief Risk Officer Report (Q3 CRO Report)
is an accurate account of NDIA risks and controls, and to remit relevant content to the next
NDIA Board meeting.
Action 3: Mr Sullivan to provide more detailed brief on Operation Royal.
6.2 Legal Risk Report
Mr Swainson s 42 - legal professional privilege
6.3 Integrity Update
Mr Dardo joined the meeting
Mr Dardo introduced the paper and gave an overview of the key matters for the Committee’s
consideration including s 47C deliberative process; s 47E(d) operations of agency
OFFICIAL: SENSITIVE
4
OFFICIAL: SENSITIVE
s 47C deliberative process; s 47E(d) operations of agency
6.4 Annual Strategic Risk Review FY 2024-25
Mr Sullivan introduced the paper and gave an overview of the pathway for the Annual
Strategic Risk Review and the key updates and changes proposed for Committee
endorsement, as set out in the paper.
The Committee discussed the place of the PACE rollout and cyber security in the Strategic
Risk Review, noting that many entities now list cyber security as their highest risk.
Mr Porter agreed it should be included in the strategic risks and undertook to work with Mr
Sullivan to incorporate cyber security into the strategic risks.
The Committee sought further information about the types of scenario testing the Agency
undertakes and information on the Agency’s Cyber Security Insurance.
The Committee asked about the change to participant goals and management confirmed
that the risk review reflected the revised portfolio budget statement.
Ms Creswell noted the ANAO is starting to see regular reporting to Boards regarding cyber
security and noted shared some information with the Committee regarding questions for
board to ask about Cyber Security.
The Committee did not endorse the Annual Strategic Risk Review and asked management
to bring the paper back out of session.
Action 7: Management to confirm the Agency’s cyber security insurance cover.
Action 8: Mr Porter to bring a paper to Board or Committee about cyber security.
Action 9: Mr Sullivan to redraft the strategic risks to include cyber security and resubmit to
Board.
6.5 Removal of Risk Margin on the Participant Plan Provision
Mr Gifford rejoined the meeting.
Mr Gifford introduced the paper and gave an overview of the key matters for the
Committee’s consideration as set out in the paper noting the Agency has received advice
from the Australian Government Actuary supporting the removal of the Participant Plan
Revision.
The Committee discussed the paper noting it should be supported and sought advice from
the ANAO representatives regarding their position on the paper. Ms Craswell noted that the
OFFICIAL: SENSITIVE
5
OFFICIAL: SENSITIVE
paper was fairly comprehensive and has not raised any concerns but further work was
required and the ANAO will confirm its position in the next few weeks.
Resolution: The Committee endorsed the change in the approach for the calculation of
Participant Plan Provision to cease adding a risk margin, for consideration by the Board,
subject to endorsement from the ANAO.
Mr Gifford left the meeting.
7.
Internal Audit Control Framework
7.1 Audit Management Report
Mr Sullivan introduced the paper and gave an overview of the key matters for the
Committee’s consideration including activities underway as part of the ANAO performance
audits, revised internal approach to meet timeframes to requests from the ANAO and the
current status of audits from the Internal Audit plan.
The Committee noted their familiarity with many of the items discussed in the report from
previous meetings and sough an update on the recruitment for a new internal auditor. Mr
Swainson confirmed that the recruitment is expected to go to market imminently.
Ms Collins clarified processes related to requests from the ANAO. The CEO and the
Committee acknowledged the work of Mr Sullivan and the Audit and Risk Branch in the
midst of the current enormous reform agenda underway.
8.
External Audit Activity
8.1 ANAO Audit Activity Report
Ms Craswell, Ms Collins and Ms Gordon introduced the paper and gave an overview of the
status of the financial statements and performance statements audit activity, current and
future performance audit outlining the approach to the upcoming payment claims compliance
audit and noted that the ANAO is finalising the Interim Controls Report for Parliament.
The Committee noted the ANAO Audit Activity update.
9.
Meeting Close
9.1 Other Business
The Chair noted he will not be at the Darwin Board meeting and the Deputy Chair will give
the update to Board.
The Committee noted that they had significant conversations regarding the audit findings
and activity during the in camera session and are pursuing the results of these discussions
outside of the Committee.
The Committee sought confirmation that the Board will receive further updates on the status
of the PACE rollout and management confirmed that PACE is a standing item on the Board
agenda.
The Committee also noted the work being undertaken by Ernst & Young (EY) in regard to
audit recommendations and activities. The Chair and Deputy Chair noted they met with EY
and that the detailed reports will come to the Committee. The Chair and Deputy Chair will
continue to meet with EY and the internal auditor before each Audit and Risk meeting.
The Chair closed the meeting at 3.25pm.
OFFICIAL: SENSITIVE
6
OFFICIAL: SENSITIVE
9.2 Next meeting
The next Committee meeting will be held on Thursday 4 September 2024.
OFFICIAL: SENSITIVE
7
DOCUMENT 10
OFFICIAL: SENSITIVE
The contents of this document are OFFICIAL: SENSITIVE
Minutes of the Out of Session resolution of the NDIA Audit and Risk
Committee
12 June 2024
Members:
Dr Graeme Innes AM, Chair
Ms Maryanne Diamond AO, Deputy Chair
Ms Meredith Allan
Mr Mark Darras
Dr Denis Napthine AO
On 12 June 2024, a paper for decision was circulated to NDIA Audit and Risk Committee
Members.
The paper sought the Audit and Risk Committee’s endorsement of the proposed Strategic
Risk and Mitigation Strategies for FY2024–25 for submission to the NDIA Board for approval,
and publication in the NDIA Corporate Plan 2024–2028.
By the end of 17 June 2024, the majority of Audit and Risk Committee members had voted in
favour of the resolution of the paper.
Resolved:
The Audit and Risk Committee endorsed the proposed Strategic Risk and Mitigation
Strategies for FY2024–25 for submission to the NDIA Board for approval, and publication in
the NDIA Corporate Plan 2024–2028.
OFFICIAL
DOCUMENT 11
OFFICIAL: SENSITIVE
The contents of this document are OFFICIAL: SENSITIVE
Meeting of Audit & Risk Committee
Minutes
24 April 2024 (out of session)
10:00am – 10:45am AEST
Virtual (MS Teams)
Attendance
Committee members:
Dr Graeme Innes AM, Chair
Ms Maryanne Diamond AO, Deputy Chair
Ms Meredith Al an
Mr Mark Darras
Dr Denis Napthine AO
Board members:
Mr Kurt Fearnley AO
Dr Richard Fejo
Ms Estelle Pearson
Dr Peta Seaton AM
Apologies:
Nil
Management representatives:
Ms Rebecca Falkingham, Chief Executive Officer
Mr Ajay Satyan PSM, A/g DCEO Enabling Services / Chief Operating Of icer
Mr Matthew Swainson, A/g DCEO Governance, Risk & Legal
Mr Mark Sullivan, GM Risk, Audit and Resilience Division & Chief Risk Of icer
Other attendees:
Dr Ian Watt AC, Specialist Advisor (Non-Board Member)
Mr Matt Curtis, BM Ecosystem Reform & Governance (Secretariat)
The Minutes are presented in the order that items were discussed.
OFFICIAL: SENSITIVE
Minutes
1
OFFICIAL: SENSITIVE
Minutes – Audit & Risk Committee 24 April 2024
Minutes
1. Meeting open
1.1 Chair’s welcome and apologies
The Chair opened the meeting at 10.05am and welcomed members and management to the
meeting.
On behalf of the Committee, the Chair acknowledged the Traditional Owners and
Custodians of the Country throughout Australia, in particular the Bundjalung people on
whose lands the Chair was meeting on in Northern New South Wales.
The Chair provided an update on activities since the last meeting, in particular:
• The Chair had a positive meeting with the acting Auditor-General, Ms Rona Mellor
PSM, and acting Deputy Auditor-General, Ms Carla Jago, in late March. The
discussion centring on the current Board governance audit, accessibility and the
mutual desire to continue to strengthen the relationship.
• The Agency met with the ANAO to provide a briefing on accessibility.
• The Chief Internal Auditor, Mr Geoff Campbell, resigned on 19 April 2024 with
immediate effect. Ms Analyn Vasquez wil act as the Chief Internal Auditor pending
permanent recruitment.
The Committee discussed the ANAO audit of Board governance and noted that the ANAO
will be observing the May Board meeting in Townsvil e. Mr Fearnley noted that he is meeting
with the acting Auditor-General on 7 May 2024.
2. ANAO proposed audit report on Compliance with corporate credit card
requirements in the NDIA
Mr Swainson introduced the paper and apologised for the lateness of the paper, noting the
requirement to liaise with Services Australia on recommendation 4.
Mr Sullivan outlined the audit scope, including the extension to include the shared services
travel arrangements given the limited number of credit cards in the Agency. Mr Sullivan
explained the Agency’s response to the 9 recommendations and approach to collaborating
with Services Australia on joint recommendations.
The Committee discussed the audit report and the proposed response, the Agency’s risk
register and the current work underway to update the risk management framework.
Overall, the Commit ee found proposed audit report, and the Agency’s response to the
report, to be measured and appropriate.
Mr Sullivan undertook to ensure outstanding matters in the draft report have been actioned.
The Committee also noted the Management of Complaints by the NDIA Audit report had
been tabled in parliament.
Resolution:
The Committee noted the ANAO proposed performance audit report on the Compliance with
corporate credit card requirements in the NDIA.
The Committee endorsed the proposed response to the Acting Auditor-General for
submission to the NDIA Board Chair.
The Committee noted the NDIA wil engage with the ANAO on editorial matters.
OFFICIAL: SENSITIVE
Minutes
2
OFFICIAL: SENSITIVE
Minutes – Audit & Risk Committee 24 April 2024
3. Meeting Close
The Chair closed the meeting at 10.49am.
3.1 Next meeting
The next Committee meeting will be held on 6 June 2024.
OFFICIAL: SENSITIVE
Minutes
3
DOCUMENT 12
OFFICIAL: SENSITIVE
The contents of this document are OFFICIAL: SENSITIVE
Audit Committee meeting of 12 September 2023
Meeting of Audit Committee
Minutes
12 September 2023
3.00pm – 5.00pm (AEST) – online
Attendance
Committee members:
Mr Graeme Innes AM, Chair
Ms Meredith Allan
Ms Maryanne Diamond AO
Dr Denis Napthine AO
Ms Estelle Pearson
Board members:
Mr Kurt Fearnley AO
Dr Richard Fejo
Ms Leah van Poppel
Dr Peta Seaton AM
Management representatives:
Ms Rebecca Falkingham, Chief Executive Officer
Ms Debbie Mitchell PSM, DCEO, Governance, Risk & Integrity
Mr Samuel Porter, Chief Operating Officer
Mr Garth O’Brien, A/g DCEO Service Design & Improvement – Item 4.2
Mr David Gifford, Scheme Actuary – Item 5
Other attendees:
Mr Mark Sullivan, Chief Risk Officer
Mr Chris Breitkreuz, Chief Financial Officer – Item 4.1
Mr Geoff Campbell, Chief Internal Auditor
Ms Clair Callaghan, BM Strategic Coordination
Mr Mick Turner, EO to Board Chair
Mr Matthew Curtis, BM Governance & Royal Commissions (Secretariat)
Mr Joshua Campbell – BM Financial Control - Item 4.1
Ms Sally Bond, Executive Director, ANAO – Item 6
OFFICIAL: SENSITIVE
Minutes
1
OFFICIAL: SENSITIVE
Minutes – Audit Committee meeting of 12 September 2023
Ms Alexandra Collins, Executive Director, ANAO – Item 6
Mr Saminda Maddumahewa, Executive Director, ANAO – Item 6
Apologies:
Nil
The Minutes are presented in order that items were discussed in the meeting.
1.
Meeting open
1.1 Chair’s welcome, Acknowledgment of Country and apologies
The Chair welcomed attendees to the meeting and provided an Acknowledgment of Country.
1.2 Declarations of material interests
The Chair noted there were no updates to the Committee members’ declarations of material
interests.
3. Administration
3.1 Minutes of the meeting held on 24 May 2023
The Committee approved the minutes of the meeting held on 24 May 2023.
3.2 Matters arising
The Committee noted the matters arising report for September 2023, approving the closure
of the 3 items proposed to be closed.
2. In-camera
The Committee held an in-camera discussion for elements of item 4.1.
4. Finance Activity
4.1 Draft Annual Financial Statements
Mr Breitkruez and Mr Campbell joined the meeting.
Mr Porter introduced the item and provided an overview of the key matters for the
Committee’s consideration, as outlined in the paper, noting:
• the Annual Financial Statements were prepared in accordance with all relevant
statutory requirements
• the ANAO is prepared to sign-off on the Annual Financial Statements on an
unqualified basis
• the Financial Statements were prepared on a going concern basis
• the ANAO had raised two new draft findings.
The Committee held an in-camera discussion about the two new draft ANAO findings.
The Committee asked management to provide further information about the draft ANAO
finding regarding delegate decisions.
Action 1: Management to provide a briefing to the Audit Committee on the draft ANAO
finding regarding delegate decisions.
The Committee discussed the detail of the Annual Financial Statements, with Mr Breitkruez
and Mr Campbell answering technical questions about the reported figures, methodology
OFFICIAL: SENSITIVE
Minutes
2
OFFICIAL: SENSITIVE
Minutes – Audit Committee meeting of 12 September 2023
and presentation of the statements. Mr Gifford joined the meeting as part of this discussion
to respond to a related question on Participant Plan Provision.
The Committee provided feedback in relation to two elements of the Financial Statements, to
be amended prior to submission to the Board, in particular the supplier costs (page 54) and
exceptionally Complex Support Needs program (page 66). Mr Porter undertook to make
those adjustments.
Action 2. Management to amend the Annual Financial Statements (pages 54 and 66) in line
with the Committee’s feedback and provide an updated version for Board consideration.
Resolution: The Committee recommended the Agency’s 2022-23 Financial Statements to
the Board for signing, as amended.
Mr Breitkreuz, Mr Campbell and Mr Gifford left the meeting.
4.2 Draft Annual Performance Statements
Mr O’Brien joined the meeting.
Mr O’Brien introduced the item and provided an overview of the key matters for the
Committee’s consideration, as set out in the paper.
The Committee discussed the draft Annual Performance Statements, in particular the
interpretation of the definitions (“achieved” and “partially achieved”), and opportunities to
reflect broader Scheme achievements in the performance statements, noting the 10-year
anniversary of the Scheme.
The Committee noted that the broader impacts of the Scheme would be referred to in the
Annual Report narrative.
The Committee noted that management would make some minor adjustments to ensure the
language used in the Performance Statements is consistent.
Resolution: The Committee agreed they are satisfied with the performance measure
systems and procedures, and recommended the NDIA Annual Performance Statements for
2022-23 be presented to the Board for approval and to be signed by the Chair on behalf of
the Board.
Mr O’Brien left the meeting.
5. Participant Plan Provision
Mr Gifford re-joined the meeting.
Mr Gifford introduced the item and provided an overview of the key matters for the
Committee’s consideration, as set out in the paper.
Mr Gifford responded to technical questions from the Committee about the figures reported
in the attachments to the paper, specifically why certain figures had been carried forward.
Resolution: The Committee endorsed the Participant Plan Provision analysis for
consideration by the Board.
OFFICIAL: SENSITIVE
Minutes
3
OFFICIAL: SENSITIVE
Minutes – Audit Committee meeting of 12 September 2023
6.
External Assurance Activity
6.1 ANAO Audit Activity Report
6.2 ANAO Closing Letter
Ms Bond, Ms Collins and Mr Maddumahewa joined the meeting.
Ms Bond provided an overview of the ANAO Audit Activity report noting the Financial
Statements audit is in draft pending comments from management, with ANAO expecting to
issue an unqualified audit opinion. The Committee noted that the ANAO Closing Letter will
be signed on Friday, 15 September 2023 and finalised on Monday, 18 September 2023.
Ms Bond gave an overview of the two new draft Category C findings.
In response to a question from the Committee, Ms Bond advised that PACE was audited
given the roll-out was initially intended to be implemented in Financial Year 2022-23, and the
ANAO had expected to audit as a major new system.
Ms Bond advised that the NDIA’s Performance Statements will be audited for 2023-24. As a
result, new auditors will be appointed to manage both the Annual Performance Statements
and the Annual Financial Statements. An introduction will be facilitated at a future Audit
Committee meeting.
The Committee discussed the audit of the effectiveness of NDIA management daily supports
and proposed reviewing the progress of the 15 recommendations as a future agenda item
for the Committee.
Ms Bond, Ms Collins and Mr Maddumahewa left the meeting.
7.
Internal Audit activity
7.1 Internal Audit Management Report
Ms Mitchell introduced the item and provided an overview of the key matters for the
Committee’s consideration, as set out in the paper.
The Committee discussed the Internal Audit Charter and Audit Plan, and noted Ms Mitchel ’s
advice that management would rationalise the Audit Plan and bring it back to the next
Committee meeting.
Action 3: Management to resubmit the Internal Audit Plan to the Audit Committee at its next
meeting.
Resolution: The Committee approved updates to the Internal Audit Charter.
7.2 Update on outstanding PACE related issues
Ms Mitchell introduced the paper, and provided a brief overview, highlighting service delivery
issues related to mental health training and the Participant Service Guarantee.
The Audit Committee noted the papers as presented.
8.
Meeting close
The meeting closed at 5.00 pm.
The next meeting will be held on 27 November 2023.
OFFICIAL: SENSITIVE
Minutes
4
DOCUMENT 13
OFFICIAL: SENSITIVE
The contents of this document are OFFICIAL: SENSITIVE
Audit Committee meeting of 27 November 2023
Meeting of Audit Committee
Minutes
27 November 2023
12.00pm – 2.00pm (AEDT)
121 Henry Street, Penrith, NSW / Teams
Attendance
Committee members:
Dr Graeme Innes AM, Chair
Ms Meredith Al an
Ms Maryanne Diamond AO
Dr Denis Napthine AO
Ms Estelle Pearson
Board members: Mr Kurt Fearnley AO
Dr Richard Fejo
Ms Leah van Poppel
Dr Peta Seaton AM
Management representatives:
Ms Rebecca Falkingham, Chief Executive Officer
Ms Debbie Mitchell PSM, DCEO, Governance, Risk & Integrity
Mr Samuel Porter, Chief Operating Of icer
Mr Mark Sullivan, Chief Risk Officer
Other attendees:
Mr Chris Breitkreuz, Chief Financial Officer – Item 3
Mr Mick Turner, EO to Board Chair
Mr Matthew Curtis, BM Governance & Royal Commissions (Secretariat)
Ms Alexandra Collins, Executive Director, Performance Audit Services Group, ANAO
Ms Lesa Craswell, A/g Group Executive Director, ANAO
Ms Catherine Pauli, Senior Director, Performance Statements Audit Services Group, ANAO.
Apologies:
OFFICIAL: SENSITIVE
Minutes
1
DOCUMENT 14
OFFICIAL: SENSITIVE
The contents of this document are OFFICIAL: SENSITIVE
Out of session resolution of the Audit Committee
18 December 2023
Committee members:
Dr Graeme Innes AM, Chair
Ms Meredith Allan
Ms Maryanne Diamond AO
Dr Denis Napthine AO
Ms Estelle Pearson
On 18 December 2023, a paper for decision was circulated to Audit Committee members via
email.
The paper sought the Audit Committee’s approval to engage Dr Ian Watt AC as an external
specialist advisor for a 2-year period to support the Committee with certain audit-related
functions.
By the end of 22 December 2023, the below named Audit Committee members had voted
via email in favour of the resolution of the paper.
-
Dr Graeme Innes
-
Ms Meredith Allan
-
Ms Maryanne Diamond
-
Dr Denis Napthine.
Resolved:
The Audit Committee approved the appointment of Dr Ian Watt AC for an initial 2-year period
commencing February 2024, to support the Committee with certain audit-related functions.
OFFICIAL: SENSITIVE
Minutes
1
OFFICIAL: SENSITIVE
Mr Mick Turner, EO to Board Chair – all items except in-camera
Ms Lesa Craswell, A/g Group Executive Director, ANAO
– all items except in camera
Ms Alexandra Collins, Executive Director, Performance Audit Services Group, ANAO – items
6.3 - 10
Ms Prue Gordon, Senior Director, Performance Statements Audit Services Group, ANAO –
all items except in camera
The Minutes are presented in the order that items were discussed. A quorum consists
of 3 Committee members. A quorum was reached for all decisions made at this
meeting.
1. Meeting open
1.1 Chair’s welcome, Acknowledgement of Country and apologies
The Chair opened the meeting at 9.00am and welcomed Members and NDIA management
representatives to the meeting.
On behalf of the Commit ee, the Chair acknowledged the Traditional Owners and
Custodians of the Country throughout Australia, in particular Tweed Heads, NSW that is the
Ngandowal and Minyungbal people of the Bundjalung Country.
The Committee acknowledged Dr Watts appointment to the NDIA Board and noted that his
attendance at today's meeting was as a Board member not as specialist advisor to the
Committee.
The Chair noted that Mr Fearnley was attending for part of the meeting, while Mr Turner
would attend as observer to brief Mr Fearnley afterwards.
2. In camera
2.1 In camera – Committee Members
The Committee held an in camera session, with Mr Porter present from 9:13am until 9:31am.
Action 1: Board Secretariat to schedule the September 2025 Audit and Risk Committee for a
full day with members attendance required in person.
3. Administration
3.1 Declarations of material interests
s 47F - personal privacy
OFFICIAL: SENSITIVE
2
OFFICIAL: SENSITIVE
s 47F - personal privacy
The Chair noted all declarations.
3.2 Minutes of the Audit & Risk Committee
The Committee endorsed the minutes of the meeting of 6 June 2024 Audit & Risk
Commit ee Meeting & Out of Session resolution of 12 June 2024 meeting.
3.3 Matters arising
The Committee noted the Matters Arising and Ongoing report which identifies matters to be
closed at the meeting and open matters, and agreed to close the matters proposed to be
closed.
4. Financial Reporting
4.1 Financial Statements
ANAO representatives re-joined the meeting at 9.36am.
Mr McNaughton, Mr Satyan, Mr Campbell, Mr Breitkreuz and Ms Papadopoulos joined the
meeting. Mr Dardo and Mr Gif ord joined during the item.
Mr Porter introduced the item and provided an overview of the key matters for the
Commit ee’s consideration as outlined in the paper, noting the ANAO were stil considering
their position on the statements and had not yet provided their Closing Letter to the Agency.
Ms Craswell confirmed that the ANAO intend to provide the Closing Letter to the Agency in
the week ending 6 September 2024.
Mr Swainson provided an overview of the legal position of the NDIA's scheme debt
disclosure, noting a paper regarding NDIA Debt Management wil be presented to the Board
in September 2024. The Commit ee discussed issues surrounding the unquantifiable
contingent liability and the ANAOs concerns.
Mr Breitkreuz and Mr Campbell responded to questions regarding the sign off process for
the Financial Statements, s 47B - Cth-state relations; s 47C - deliberative process; s 47E(d) - operations of agency
The Committee discussed the ANAO's material clearance of the key figures in the financial
statements noted at point 3.14 of the paper. Ms Craswell confirmed that the items noted at
item 3.14 of the paper had now been materially cleared, with the exception of scheme debt
as a provision vs contingent liability.
The Committee discussed the current open Audit Findings and ANAO materiality threshold.
Action 2: Mr Breitkreuz to review in-kind wording in the financial statements notes to more
clearly explain the movement between Gains and Revenue in relation to in-kind.
Action 3: Mr Dardo and Ms Papadopoulos to review the wording of the payment error
disclosures in the financial statements and look to incorporate the wording from Audit and
Risk Committee around positive errors that are not picked up by the current methodology,
and also incorporate the mention of a future review of methodology to be undertaken.
OFFICIAL: SENSITIVE
3
OFFICIAL: SENSITIVE
Action 4: Mr Breitkreuz to confirm the date the lodgement of the Financial Statements is
required to be submitted to the Department of Finance.
Action 5: Mr Campbell to draft an out of session paper with inputs on some of the new
findings from the relevant business areas once the closing letter is received from ANAO.
Action 6: Secretariat to arrange an out of session meeting of the Audit and Risk Committee
to consider the Financial Statements.
Resolution:
The Commit ee noted the NDIA’s 2023-24 Financial Statements, with a further out of session
meeting to occur to endorse the Financial Statements for progression to the NDIA Board for
approval and signing once the ANAO Closing Letter is received.
Mr Satyan, Mr Campbell, Mr Breitkreuz and Ms Papadopoulos left the meeting.
4.2 Participant Plan Provision & Residential Aged Care Payable
Mr Gif ord introduced the item and provided an overview of the key matters for the
Commit ee’s consideration as outlined in the paper.
The Committee discussed the Participant Plan Provision, including the reasons for applying
the provision and how it is calculated. The Committee also discussed the Residential Aged
Care (RAC) cross-bil ing arrangements for participants.
Resolution:
The Audit Commit ee endorsed the Participant Plan Provision analysis for consideration by
the Board.
Mr McNaughton left the meeting.
OFFICIAL: SENSITIVE
4
OFFICIAL: SENSITIVE
5. Performance Reporting
5.1 Performance Activity Update (including draft 2023-24 Performance Statements)
Mr Gif ord introduced the item and gave an overview of the Agency's performance in
2023-24. Mr Gif ord confirmed the Agency achieved 9 of their targets, 4 were partly achieved
and 5 were not achieved.
Mr Gif ord noted that minor changes were required to the Statements prior to progression to
the Board on 19 September 2024.
The Committee discussed the ANAO's Interim Management Letter for the Annual
Performance Statements audit, noting to date the Agency were yet to receive the ANAO's
Closing Letter for the 2023-24 Performance Statements.
The Committee also discussed the new Performance Measures in the 2024-25 Corporate
Plan, which better reflect the Agency's performance. The Commit ee considered whether the
Statement of Preparation in the Agency's 2023-24 Performance Statements should be
updated to note the new Performance Measures and whether it should note that the
Performance Statements are being audited by the ANAO for the first time.
Action 7: Management to review the language used in the Statement of Preparation in the
2023-24 Performance Statements, considering the new Performance Measures in the 2024-
25 Corporate Plan and the fact they better reflect the Agency's performance. Management to
also consider the requirements of the Public Governance, Performance and Accountability
Act 2013 (PGPA Act) and rules and requirements and policies in which the Board Chair is
required to sign off.
Resolution:
The Committee agreed, subject to managements consideration of the requested
amendments, to advise the NDIA Board that the annual performance statements accurately
present the performance of the NDIA in the reporting period and comply with subsection
39(2) of the Public Governance, Performance and Accountability Act 2013 and section 16F
of the Public Governance, Performance and Accountability Rule 2014.
The Committee recommends that the Chair of the Board sign the statement of preparation.
Mr Fearnley and Mr Gifford left the meeting.
6. Risk Oversight and Management
6.1 Chief Risk Officer Report (Q4 2023–24)
Mr Swainson and Mr Fisher introduced the item, advising the Committee of the upgrading of
Strategic Risk 6 (SR6) from high to critical. The Chair requested that the Minister should be
informed of the upgrading of SR6.
The Committee discussed the use of consultants for assurance work and independency.
The Committee discussed the Risk Management Architecture, with ANAO representatives
making a request for a number of amendments to be made.
Action 8: Mr Fisher to amend the following in the Risk Management Architecture:
1 Remove reference to ‘ANAO management’, to be replaced with ‘ANAO Coordination’
consistent with functional name.
OFFICIAL: SENSITIVE
5
OFFICIAL: SENSITIVE
2 Reference to the ANAO within the framework section of Architecture is to be
removed, as they do not form part of the Agency’s assurance framework.
Resolution:
The Committee:
1 Agreed that the Q4 FY2023–24 Chief Risk Officer Report (Q4 CRO Report) is an
accurate account of NDIA risks and controls, and to remit relevant content to the next
NDIA Board meeting on 19 September 2024.
2 Noted the updated Risk Management Architecture for presentation at the next NDIA
Board meeting.
3 Discussed and endorsed the draft Risk Management Declaration 2023–24 for
submission to the next NDIA Board meeting, subject to the requested amendments
to the document as referenced by the ANAO.
6.2 Strategic Risk Settings 2024-25
Mr Fisher introduced the item and provided an overview of the key matters for the
Commit ee’s consideration as outlined in the paper.
The Committee discussed the new Strategic Risk Appetite value statement (as per
Attachment C of the paper), reflecting that it provides greater accountability and visibility and
is reflective of the growing maturity of the Agency.
The Committee requested that management consider, and if possible, advise which of the
Strategic Risk Mitigation Strategies are likely to be the main drivers for achievement of the 3-
year Horizon rating.
Action 9: Management consider, and if possible, advise which of the Strategic Risk
Mitigation Strategies are likely to be the main drivers for achievement of the 3-year Horizon
rating.
Resolution:
The Committee endorsed the Strategic Risk settings for FY2024–25 and the draft NDIA Risk
Appetite Statement 2024–25 for presentation to the NDIA Board.
6.3 Legal Risk Report
Ms Collins joined the meeting.
Mr Swainson s 42 - legal professional privilege
OFFICIAL: SENSITIVE
6
OFFICIAL: SENSITIVE
s 42 - legal professional privilege
6.4 Integrity Update
Mr Dardo joined the meeting and introduced the item, giving a detailed overview of the
Integrity Program.
s 47C deliberative process; s 47E(d) operations of agency
Action 11: Mr Dardo to arrange a briefing for Dr Watt on the Integrity work being undertaken.
Mr Dardo left the meeting.
OFFICIAL: SENSITIVE
7
OFFICIAL: SENSITIVE
7. Internal Audit Control Framework
7.1 Audit Management Report
Mr McNaughton, Ms McKay and Ms Vaquez joined the meeting.
Mr Swainson introduced the paper, advising the Commit ee of the new format for the internal
audit report is intended to give management and the Commit ee bet er visibility of status of
the audit program and ANAO recommendations.
The Chair noted that he and Ms Diamond wil meet with the internal auditor and Ernst and
Young prior to each Audit and Risk Commit ee meeting. The Chair also advised the
committee that the selection for new Chief Internal Auditor is ongoing.
Mr Fisher gave an overview of the key points outlined in the Audit Management Report and
advised the Committee that the team would present the proposed changes to the reporting
and governance framework at the November 2024 Audit and Risk Commit ee meeting.
Action 12: Management to present the revised Audit operating model (inclusive of new
resources and functions) and related governance arrangements at the November 2024 Audit
and Risk Committee meeting.
Resolution:
The Audit and Risk Committee discussed the update on internal and external audit activities
and overdue issues and endorsed the endorsed the draft 2024–25 to 2026–27 Internal Audit
Plan, draft Internal Audit Charter and the new Audit Status Report.
Ms McKay and Ms Vaquez left the meeting.
7.2 Detailed briefing on Operation Royal
Mr Fisher introduced the item and provided an overview of the key matters for the
Commit ee’s consideration as outlined in the paper. Mr Fisher noted the Operation Royal
investigation remains ongoing and is due before the Federal Court week commencing 9
September 2024.
The Committee discussed the security measures and access controls put in place to prevent
staff inappropriately accessing participant information.
Action 13: Management to provide a summary of operational enhancements post Operation
Royal to be presented at November 2024 Audit and Risk Committee meeting (covering staff
communications, ICT uplift , access provisioning, insider threat function, data breach
protocols, etc.)
Mr McNaughton left the meeting.
8. External Audit Activity
8.1 ANAO Audit Activity Report
Ms Craswell, introduced the item and gave an overview of the status of the Financial
Statements and Performance Statements Audits. Ms Craswell advised that the Financial
Statements Audit is close to finalisation and the Performance Statements Audit is
progressing as expected.
The Committee discussed the progress of the Board Governance and Payment Claims
Compliance Audits. Ms Collins noted that both audits are progressing well and engagement
from the business area has been helpful.
OFFICIAL: SENSITIVE
8
OFFICIAL: SENSITIVE
The Committee agreed that the Fraud enquiries from the ANAO would be addressed in
camera with a formal response to the question to be submitted back to the ANAO by Friday
6 September.
9. Other Business
The Chair noted the commitment of staff and management to gather all the material for
today's meeting. The Chair thanked Commit ee members and observers for their questions
and constructive engagement with the papers.
Action 14: Ms McKenzie to provide a briefing on PACE for Dr Watt regarding issues put to
Board and progress to date.
10. Meeting Close
The Chair called the meeting to a close and the Commit ee held an in-camera session with
Mr Porter present from 1:28pm.
Resolution: The Committee endorsed proposed responses to the ANAO fraud enquiries be
provided to the ANAO in writing by COB 6 September 2024.
OFFICIAL: SENSITIVE
9
DOCUMENT 16
OFFICIAL: SENSITIVE
The contents of this document are OFFICIAL: SENSITIVE
Risk Committee meeting of 14 September 2023
Meeting of Risk Committee
Minutes
14 September 2023
11:30am – 1:30pm (AEST)
111 Macquarie Street, Hobart Tasmania
Attendance
Committee members:
Ms Maryanne Diamond AO, Chair
Mr Kurt Fearnley AO
Ms Meredith Al an
Dr Denis Napthine AO
Board members: Ms Estelle Pearson
Dr Peta Seaton
Dr Richard Fejo
Ms Leah van Poppel
Management representatives:
Ms Rebecca Falkingham, Chief Executive Officer
Ms Debbie Mitchell PSM, DCEO Governance, Risk & Integrity
Mr John Dardo, Chief Transformation Officer (item 4.4)
Mr Garth O’Brien, A/g DCEO Service Design and Improvement (item 4.5)
Other attendees:
Mr Mark Sullivan, Chief Risk Officer
Mr Matthew Swainson, Chief Counsel Legal (item 4.3)
Mr Matthew Curtis, BM Governance & Royal Commissions (Secretariat)
Ms Claire Callaghan, BM Strategic Coordination
Mr Mick Turner, EO to Board Chair
Apologies:
Nil
The Minutes are presented in order that items were discussed in the meeting.
OFFICIAL: SENSITIVE
Minutes
1
OFFICIAL: SENSITIVE
Minutes – NDIA Risk Committee of 14 September 2023
1. Meeting open
1.1
Chair’s welcome, Acknowledgment of Country and apologies
The Chair welcomed everyone to the meeting, provided an Acknowledgement of Country,
and noted there were no apologies.
1.2
Declaration of material interests
The Chair noted there were no updates to the members’ declarations of material interests.
2. In-camera
The Chair conferred with the Committee and confirmed that no in-camera session was
required.
3. Administration
3.1
Minutes of the 24 May 2023 meeting
The Committee approved the minutes of the meeting held on 24 May 2023.
3.2
Matters arising
The Committee noted the matters arising report for September, approving the closure of the
item proposed to be closed.
4. Matters for discussion and decision
4.1
Chief Risk Officer Report
Mr Sullivan introduced the item and gave an overview of the key matters for the Commit ee’s
consideration, as set out in the paper, noting:
• the Agency was seeking the Commit ee’s endorsement of the Risk Management
Declaration, to be submit ed to the Board for decision on 15 September 2023, and
• the Fraud and Corruption Control Plan had previously been tabled and approved by
in November 2022. The ANAO has subsequently requested approval of the Board.
The plan had been re-submitted to the Commit ee for endorsement prior to
consideration by the Board.
The Committee noted that no material findings had been identified by internal audit as part of
the preparation of the Risk Management Declaration. The Commit ee discussed the 4
improvement opportunities identified in the self-assessment and noted Mr Sullivan’s advice
that the deterioration of notifications to the NDIS Commission relates to the level of
information provided and that improvement action was underway.
The Committee discussed the Fraud and Corruption Control Plan and noted typographic
errors in section 1.2.1. Management undertook to correct the errors in the final document
before its progress to Board.
Action 1: Management to correct the errors noted in the Fraud and Corruption Control Plan
before it progresses to Board.
s 47C deliberative process; s 47E(d) operations of agency
OFFICIAL: SENSITIVE
Minutes
2
OFFICIAL: SENSITIVE
Minutes – NDIA Risk Committee of 14 September 2023
Action 2: Ms Kitsa Papadopoulos, GM Fraud Fusion Taskforce, to attend the next
Committee meeting to present on Agency activities in fraud space and impacts on
participants.
The Committee discussed the risk-related impacts arising from ANAO audits, as well as the
Disability Royal Commission and NDIS Review reports, and linkage to the Risk Commit ee
workplan. Ms Falkingham noted that the Agency would map the Agency’s broader program
of work and how it aligns with the Board and each Committee. This wil be done as part of
the usual forward planning.
The Committee also discussed business continuity planning, including the structure and
allocation of resources.
Mr Sullivan provided an overview of an open fraud matter currently before the courts.
The Committee requested high-level detail of fraud matters, particularly the percentage of
non-compliance, be included in future papers.
Action 3: Management to provide further detail on fraud cases in future papers.
Resolution:
• The Risk Commit ee endorsed the 2022-23 Risk Management Declaration for
submission to the Board for endorsement.
• The Risk Commit ee endorsed the Fraud and Corruption Control Plan and specific
fraud and corruption risk consequence categories for inclusion in the NDIA Risk
Rating Matrix, for submission to the Board for endorsement, with required edits to
section 1.2.1.
4.2
Risk Management Strategy
Ms Falkingham introduced the item and gave an overview of the key mat ers for the
Commit ee’s consideration, as set out in the paper, including an update on the HWLE Data
Breach. Ms Falkingham emphasized the Agency’s commitment that communication with
participants is supportive and does not exacerbate any harm caused by the incident.
The Committee and management discussed learnings of the incident and how these might
inform the Agency’s response to future events. The Committee noted the update from Mr
Sullivan on the Barkley Tableland fires in the Northern Territory, in particular that two NDIA
staff were on the ground supporting participants. Ms Falkingham advised that she had
spoken with the staff, who were deeply commit ed to supporting the community. Ms
Falkingham noted that 2023-24 was expected to be one of the worst fire seasons, and that
the Agency was making preparations.
The Committee, on behalf of the Board, passed on its well wishes and gratitude to the staff
assisting the fire response.
Action 4: Management to pass on the Board’s gratitude and well wishes to the two NDIA
staff members assisting the Barkley Tableland fires.
4.3
Chief Counsel Report
Mr Swainson s 42 - legal professional privilege
OFFICIAL: SENSITIVE
Minutes
3
OFFICIAL: SENSITIVE
Minutes – NDIA Risk Committee of 14 September 2023
of Local Area Coordinators. Mr O’Brien clarified that some of the matters reported as PACE
roll-out issues by the Providers were un-related policy or process changes.
The Committee noted that it would prefer more time for provider visits in future and
suggested that a visit to the NCC would be helpful.
Mr O’Brien left the meeting.
Action 5: Board Secretariat to include a visit to the NCC on the forward Board calendar.
5. Meeting close
The Committee requested that the attachments to papers include the agenda item number in
future Commit ee documents.
Action 6: Board Secretariat to ensure that all papers are correctly labelled with a
corresponding agenda item number.
The meeting closed at 1.28 pm.
OFFICIAL: SENSITIVE
Minutes
5
OFFICIAL: SENSITIVE
Minutes – NDIA Risk Committee of 27 November 2023
The Minutes are presented in order that items were discussed in the meeting.
1. Meeting open
1.1 Chair’s welcome, Acknowledgment of Country and apologies
The Chair welcomed everyone to the meeting, provided an Acknowledgement of Country,
and noted there were no apologies.
1.2 Declaration of material interests
The Chair noted there were no updates to the members’ declarations of material interests.
2. In-camera
The Chair conferred with the Committee and confirmed that no in-camera session was
required.
3. Administration
3.1 Minutes of the 14 September 2023 meeting
The Committee approved the minutes of the meeting held on 14 September 2023.
3.2 Matters arising
The Committee noted the matters arising report for November 2023, approving the closure
of the items proposed to be closed.
4. Matters for discussion and decision
4.1 Chief Risk Officer (CRO) Report
Ms van Poppel joined the meeting.
Mr Sullivan introduced the item and gave an overview of the key matters for the Commit ee’s
consideration, as set out in the paper.
The Committee discussed the CRO Report in detail, in particular:
• results of the 2023 Comcover Benchmarking survey and consequential
enhancements to the Risk Management framework.
• enhanced focus emergency management resourcing and operations to be delivered
as part of the Agency’s new structure.
• feedback loop for tip off referrals.
• deferral of the sunsetting date for the NDIS Risk Management Rules to 1 October
2025.
Resolution:
The Risk Commit ee agreed that the Q1 CRO Report is an accurate account of NDIA risks
and controls, and to remit relevant content to the next meeting of the NDIA Board.
The Risk Commit ee noted the 2023 Comcover Benchmarking Survey results.
The Risk Commit ee noted the deferral of the sunsetting of the NDIS – Risk Management
Rules 2013.
OFFICIAL: SENSITIVE
Minutes
2
OFFICIAL: SENSITIVE
Minutes – NDIA Risk Committee of 27 November 2023
The Risk Commit ee noted the NDIA Integrity Maturity Self-Assessment Survey Evaluation.
4.2 Review of the Risk Management Strategy
Mr Sullivan introduced the item and gave an overview of the key matters for the Commit ee’s
consideration, as set out in the paper.
The Committee discussed the Risk Management Strategy in detail, with particular reference
to the broader strategic environment and impact of recommendations arising from the
Disability Royal Commission and NDIS Review.
The Committee noted that Risk Management Strategy would continue to be closely
monitored as part the annual legislative requirement and that, if approved by the Commit ee,
the Strategy will progress to the Disability Reform Ministerial Council in early 2024.
Resolution:
The Risk Committee endorsed the NDIA Risk Management Strategy for consideration by the
Board.
4.3 Strategic Risk Settings for FY2023-24
Mr Sullivan introduced the item and gave an overview of the key matters for the Commit ee’s
consideration, as set out in the paper.
Mr Sullivan noted that the Risk Settings and associated architecture focus on lead risk
indicators that foreshadow risk degradation.
The Committee discussed the Strategic Risk Settings for FY2023-24 including tailored risk
appetite statements, Key Risk Indicators (KRIs) and Current/Target risk ratings in the context
of the Disability Royal Commission and NDIS Review findings and recommendations,
Agency reporting, and the interplay between risk and the Agency Strategy.
Resolution:
The Risk Commit ee endorsed the Strategic Risk Settings for FY2023-24.
4.4 Chief Counsel and General Counsel Report
Mr McGregor joined the meeting.
Mr McGregor s 42 - legal professional privilege
OFFICIAL: SENSITIVE
Minutes
3
OFFICIAL: SENSITIVE
Minutes – NDIA Risk Committee of 27 November 2023
s 42 - legal professional privilege
Mr McGregor left the meeting.
4.5 Fraud and Risk Update
Mr Dardo and Ms Papadopoulos joined the meeting. Ms Falkingham left the meeting.
Mr Dardo s 47C deliberative process; s 47E(d) operations of agency
4.6 Operation Royal
Ms Mitchell provided a detailed briefing on Operational Royal, including the background and
current status of the operation.
The Committee discussed the impact on affected participants and timeline of for notification.
The Committee noted that a further update would be provided at the Board Meeting
scheduled for the following day (28 November 2023).
5. Meeting close
5.1 Next Meeting
The meeting closed at 11.32 am AEDT.
The Committee noted the next meeting wil be held on 14 March 2024 (online).
OFFICIAL: SENSITIVE
Minutes
4
DOCUMENT 18
OFFICIAL: SENSITIVE
The contents of this document are OFFICIAL: SENSITIVE
Meeting of NDIA Board
Minutes
9 May 2024
8:00am – 2:00pm AEST
235-259 Stanley Street, Townsville / Teams
s 22 - irrelevant matter
OFFICIAL: SENSITIVE
Minutes
1
OFFICIAL: SENSITIVE
s 22 - irrelevant matter
OFFICIAL: SENSITIVE
s 22 - irrelevant matter
OFFICIAL: SENSITIVE
s 22 - irrelevant matter
OFFICIAL: SENSITIVE
s 22 - irrelevant matter
OFFICIAL: SENSITIVE
s 22 - irrelevant matter
4.
Council and Committee matters
s 22 - irrelevant matter
4.3. Out of Session Minutes of the Audit and Risk Committee meeting of 24 April 2024
Chair of the Audit and Risk
Committee, Dr Innes, provided the Board with a summary of a
recent meeting with the Acting Deputy Auditor-General, and the out of session meeting of
the Committee on 24 April 2024.
The Chair noted the significant work of management in strengthening the relationship with
the Australian National Audit Office (ANAO).
OFFICIAL: SENSITIVE
Minutes – NDIA Board of 9 May 2024
Action 12: Board Secretariat to include meeting with Auditor-General in induction for future
Board and Audit Chairs (to be imbedded in updated Board Charter).
OFFICIAL: SENSITIVE
Minutes
7
OFFICIAL: SENSITIVE
s 22 - irrelevant matter
OFFICIAL: SENSITIVE
s 22 - irrelevant matter
OFFICIAL: SENSITIVE
s 22 - irrelevant matter
DOCUMENT 19
OFFICIAL: SENSITIVE
The contents of this document are OFFICIAL: SENSITIVE
Board meeting of 15 September 2023
Meeting of NDIA Board
Minutes
15 September 2023
8:00am – 2:30pm (AEST)
NDIA office, 111 Macquarie Street, Hobart Tasmania and online
s 22
OFFICIAL: SENSITIVE
Minutes
6.2.1
OFFICIAL: SENSITIVE
s 22 - irrelevant matter
3
Fraud and Corruption Risk and Control Updates
Mr Sullivan joined the meeting.
Ms Mitchell introduced the item and provided an overview of key matters for the Board’s
consideration, as set out in the paper, noting that Risk Committee had examined the report
in detail at its meeting of 14 September 2023. Ms Mitchell confirmed requested changes to
the Fraud and Corruption Control Plan had been made following the Risk Committee
meeting.
s 22 - irrelevant matter
OFFICIAL: SENSITIVE
s 22 - irrelevant matter
4
Committee Updates
4.1
Audit Committee
On behalf of the Chair of the Audit Committee, Dr Napthine provided a summary of the key
matters arising from the Committee’s meeting on 12 September 2023 and noted the
endorsement of the Financial Statements for consideration by the Board.
4.2
Risk Committee
Ms Diamond provided a summary of the key matters arising from the Committee’s meeting
on 14 September 2023 and noted the endorsement of the Risk Management Declaration
and other risk papers for consideration by the Board.
s 22 - irrelevant matter
OFFICIAL: SENSITIVE
s 22 - irrelevant matter
6
3P / PACE Update
6.1
3P / PACE Update
Mr O'Brien introduced the item and gave an overview of the key matters for the Board’s
consideration, as set out in the paper, noting:
• the Risk Committee discussions of 14 September 2023 on current risks settings.
s 22 - irrelevant matter
OFFICIAL: SENSITIVE
Minutes
6.2.4
s 22 - irrelevant matter
8
Annual Report
8.1
Financial Statements
Mr Gifford, Mr Breitkreuz and Mr Campbell joined the meeting.
Mr Gifford introduced the item and gave an overview of the key matters for the Board’s
consideration, as set out in the paper, noting the Financial Statements:
• have been prepared on a going concern basis
• were discussed in detail at the Audit Committee meeting of 12 September 2023
• include the participant plan provision, and
• were reviewed and signed by Ms Falkingham as CEO and Mr Breitkreuz as CFO.
The Board discussed the Financial Statements, including advice from the Audit Committee
about the appropriateness of the Financial Statements.
Resolution: The Board endorsed the
Agency’s 2022-23 financial statements and authorised
the Board Chair to sign on behalf of the Board.
s 22 - irrelevant matter
8.3
Annual Report and Performance Statements
Mr O’Brien rejoined the meeting. Mrs McKenna Kerr rejoined the meeting.
Mr O’Brien introduced the item and gave an overview of the key matters for the Board’s
consideration, as set out in the paper, noting that it had been discussed in detail at the Risk
Committee meeting of 14 September 2023.
The Board discussed the Annual Report and Performance statements, including the advice
of the Risk Committee on the appropriateness of the Performance Statements. The Board
discussed the performance measures and noted they are framed around the legislated
Participant Service Guarantee metrics.
s 22 - irrelevant matter
OFFICIAL: SENSITIVE
s 22 - irrelevant matter
OFFICIAL: SENSITIVE
s 22 - irrelevant matter
12
Risk Management Declaration
Ms Mitchell introduced the paper and gave an overview of the key matters for Board
consideration, including:
• the outcome of the annual self-assessment of compliance with the Risk Management
Rules, and subsequent review by the ANAO, and
• the detailed discussion at Risk Committee on 14 September 2023.
Ms Diamond noted that the Risk Committee had approved the Risk Management
Declaration on 14 September 2023, for consideration and endorsement of the Board.
The Board discussed the key elements of the paper.
Resolution: The Board approved the Risk Management Declaration 2022-23 and authorised
the Board and Risk Committee Chairs to sign the Declaration.
s 22 - irrelevant matter
s 22 - irrelevant matter
s 22 - irrelevant matter
DOCUMENT 20
OFFICIAL: SENSITIVE
The contents of this document are OFFICIAL: SENSITIVE
Board meeting of 28 November 2023
Meeting of NDIA Board
Minutes
28 November 2023
9:00am – 3:00pm (AEDT)
121 Henry Street, Penrith / Teams
s 22
OFFICIAL: SENSITIVE
Minutes
1
OFFICIAL: SENSITIVE
s 22 - irrelevant matter
OFFICIAL: SENSITIVE
s 22 - irrelevant matter
s 22 - irrelevant matter
s 22 - irrelevant matter
s 22 - irrelevant matter
OFFICIAL: SENSITIVE
Minutes
6
s 22 - irrelevant matter
s 22 - irrelevant matter
15.1 Audit Committee
Chair of the Audit Committee, Mr Innes, provided a brief update, noting that Board members
had all been present at the Audit Committee meeting the previous day.
15.2 Risk Committee
Chair of the Risk Committee, Ms Diamond, provided a brief verbal overview of the Risk
Committee meeting of 27 November 2023, noting several Committee-related matters for
decision would follow during the Board meeting.
s 22 - irrelevant matter
s 22 - irrelevant matter
17. Annual Review of NDIA Risk Management Strategy
Mr Sullivan joined the meeting.
Mr Sullivan introduced the item and gave an overview of the key matters for the Board’s
consideration, as set out in the paper.
The Board noted the substantive discussion on this item was had at the Risk Committee
meeting the day prior, with a majority of Board members present.
Resolution:
The Board endorsed the proposed new NDIA Risk Management Strategy for submission to
the Ministerial Council.
18. Strategic Risk Settings for FY 2024-24
Mr Sullivan introduced the item and gave an overview of the key matters for the Board’s
consideration, as set out in the paper.
The Board noted the substantive discussion on this item was had at the Risk Committee
meeting the day prior, with a majority of Board members present.
Resolution:
The NDIA Board approved the Strategic Risk Settings for FY2023-24, including tailored risk
appetite statements, Key Risk Indicators against mitigation strategies and associated targets
and Current / Target risk ratings.
s 22 - irrelevant matter
19. Chief Risk Office (CRO) Report
Mr Sullivan introduced the item and gave an overview of the key matters for the Board’s
consideration, as set out in the paper.
The Board briefly discussed the key elements of the CRO Report, noting the substantive
discussion on this item was had at the Risk Committee meeting the day prior, with a majority
of Board members present.
s 22 - irrelevant matter
DOCUMENT 21
OFFICIAL: SENSITIVE
The contents of this document are OFFICIAL: SENSITIVE
Meeting of NDIA Board
Minutes
27 March 2024
9.00am – 2.15pm AEDT
MS Teams
s 22
OFFICIAL: SENSITIVE
Minutes
1
s 22 - irrelevant matter
s 22 - irrelevant matter
3.4. Board Committee update Ms Mitchell introduced the item and provided an overview of the key matters for the Board’s
consideration, as set out in the paper. In particular, Ms Mitchell highlighted the statutory
requirements and good governance principles relevant to the Board’s review of the
committee structure and membership, the changes made to the Audit and Risk Committee
Charter since it was reviewed at the joint Audit and Risk Committees on 14 March 2024, and
the steps taken by the Agency to update the Board’s Skills Matrix.
The Board discussed the new committee structure and mix of skil s within the current Board
membership. The Board noted that, although the current mix of skil s and experience is
sufficient and relevant to the Agency’s functions, the vacant Board member role may benefit
from a candidate with financial/accounting expertise, to further strengthen the experience
brought by the newly appointed specialist advisor, Dr Ian Watt AC, to the Audit and Risk
Committees.
The Board undertook to provide the Board secretariat with any further information that
should be included on the skil s matrix, including the information that Board members would
provide to the Audit committee if they were to become members.
Resolution:
The Board considered the skil s and experience of members and agreed to the proposed
membership of Board Committees (as set out in paragraph 4.5 of the paper).
The Board endorsed the Audit & Risk Committee Charter.
s 22 - irrelevant matter
4. Council and Committee matters
s 22 - irrelevant matter
s 22 - irrelevant matter