Risk management

Risk and audit at a glance

The Risk Management and Audit Committee (RMAC) provides independent assurance and assistance to the Chief Executive and Executive Leadership Team on the department’s risk, control and compliance framework, and its financial statement responsibilities. The Committee assists in the identification of risks, determining priorities for action, developing and implementing strategies for effective risk management and in ensuring accountabilities are met.

RMAC members are appointed by the Chief Executive with the Chair being an independent external member.

The objective of Internal Audit is to provide reasonable assurance to the Chief Executive, Executive Directors, and RMAC that the department’s systems of internal control are implemented, operating effectively and assist in the treatment of risk. It provides an independent and objective appraisal of the department’s activities for the purpose of adding value and improving operational efficiency, risk management, internal control systems and governance processes.

Internal Audit also considers the risk of fraud and maladministration in the course of their work. This includes supporting and collaborating with the department’s Incident Management Unit in the performance of investigations into allegations of fraud, maladministration, and other complaints.

The Incident Management Unit (IMU) is the department’s primary investigative body and is responsible for undertaking all investigations relating to potential fraud, misconduct or maladministration, care concern investigations and Critical Client Incidents. This ensures consistency and efficiency in the department’s response to incidents and potential fraud and has strengthened controls and investigatory capacity. Investigations may be assigned to Internal Audit where appropriate.

The IMU also manages referrals from the Independent Commissioner Against Corruption and requests for information under the National Redress Scheme in response to the Royal Commission into Institutional Responses to Child Sexual Abuse.

Back to top

Fraud detected in the agency

NB: Fraud reported includes actual and reasonably suspected incidents of fraud.

Back to top

Strategies implemented to control and prevent fraud

The department has a zero tolerance to fraud and maladministration. It is DHS’ policy that all incidents of discrepancies in client records, funds and/or property are recorded on Gov SAfety, the internal departmental recording system.

The DHS Fraud and Corruption Control Framework addresses the processes for responding to and reporting incidents of fraud and corruption within the department. It aligns with the South Australian Government Fraud and Corruption Control Policy and summarises responsibilities of key areas.

During 2022–23, the department’s Risk Management Framework was updated. The purpose of the Framework is to define the department’s attitude and approach to risk management, and outline roles and responsibilities. The Framework is consistent with international standard ISO 31000:2018 Risk Guidelines and aligns with the State Government’s risk management requirements, including Treasurer’s Instruction 2 (TI2) Financial Management and the South Australian Government Financing Authority Risk Management Guide.

The Assurance Committee is accountable to the Executive Leadership Team for ensuring DHS meets all of its governance requirements. This includes being responsible for effectively monitoring, managing, and reporting on risks, internal audit findings and breaches to ensure compliance. The Committee also approves the annual internal audit workplan and has an overarching oversight role in ensuring the department is implementing and actioning RMAC recommendations.

Data for previous years is available at: Data.SA - Annual Reporting - DHS Annual Report Data

Back to top

Public interest disclosure

Data for previous years is available at: Data.SA - Annual Reporting - DHS Annual Report Data

Note: Disclosure of public interest information was previously reported under the Whistleblowers Protection Act 1993 and repealed by the Public Interest Disclosure Act 2018 on 1/7/2019.

Back to top