Risk management

Risk and audit at a glance

The Risk Management and Audit Committee (RMAC) provides independent assurance and assistance to the Chief Executive and Executive Leadership Team on the department’s risk, control and compliance framework, and its financial statement responsibilities. RMAC assists the Chief Executive in the identification of risks, determining priorities for action, developing and implementing strategies for effective risk management and in ensuring accountabilities are met.

The Committee, which also oversees the focus and work undertaken by Internal Audit and Risk, is chaired by an external member and met five times during the 2023-24 financial year.

Internal Audit and Risk provides independent and objective assurance to the Chief Executive and Executive Directors over the implementation and effectiveness of the department’s systems of internal control in the management of risk. The identification, recording, monitoring, and reporting of risks within DHS is undertaken by a dedicated Risk Management Officer who is part of Internal Audit and Risk.

Internal Audit and Risk considers the risk of fraud and maladministration in its audit program and attends RMAC meetings to provide relevant internal audit reports. It also supports and collaborates with the department’s Incident Management Unit in the performance of investigations into allegations of fraud, maladministration, and other complaints.

The Incident Management Unit (IMU) is the primary investigative body within the department. It is responsible for the triaging of incidents and the centralised functions associated with conducting departmental investigations, managing employee misconduct processes, and the declaration of critical client incidents.

The IMU provides a central point for information sharing with the South Australia Police and is responsible for investigating matters referred to the department by the Independent Commission Against Corruption.

Back to top

Fraud detected in the agency

NB: Fraud reported includes actual and reasonably suspected incidents of fraud.

Back to top

Strategies implemented to control and prevent fraud

The department has a zero tolerance to fraud and maladministration. It is DHS’ policy that all incidents of discrepancies in client records, funds and/or property are recorded on the Gov SAfety incident reporting system.

The Fraud and Corruption Control Framework addresses the processes for responding to and reporting incidents of fraud and corruption within the department. The framework aligns with the South Australian Public Sector Fraud and Corruption Control Policy and outlines the department’s robust internal control environment that ensures the monitoring of fraudulent activity and active evaluation of the controls that reduce the likelihood and severity of fraudulent or corrupt activity.

The Risk Management Framework defines the department’s attitude and approach to risk management, and outlines roles and responsibilities. The framework aligns to the requirements of the international standard ISO 31000:2018 Risk Guidelines and the State Government’s risk management requirements, including Treasurer’s Instruction 2 (TI2) Financial Management and the South Australian Government Financing Authority Risk Management Guide.

The department’s Assurance Committee is an executive decision-making authority accountable to the Executive Leadership Team for ensuring DHS meets all governance requirements. The Committee approves the annual internal audit workplan and is responsible for effectively monitoring, managing, and reporting on risks, internal audit findings and breaches to ensure compliance. It also has an overarching oversight role in ensuring the department is implementing and actioning RMAC recommendations.

Data for previous years is available at: Data.SA - Annual Reporting - DHS Annual Report Data

Back to top

Public interest disclosure

Data for previous years is available at: Data.SA - Annual Reporting - DHS Annual Report Data

Note: Disclosure of public interest information was previously reported under the Whistleblowers Protection Act 1993 and repealed by the Public Interest Disclosure Act 2018 on 1/7/2019.

Back to top