Audit Insights

Overview

This page provides an overview of key insights emerging from internal audits conducted by the Office of Internal Audit and Oversight (IAO). The insights reflect both, areas of effective practice and areas where additional strengthening was identified during the audits.

This page complements individual audit summaries by presenting:

The assurance framework used by IAO;
A portfolio-level view of audit results;
Common themes identified across audits;
Examples of effective practices.

Internal audit provides independent assurance and advisory insights intended to support continuous improvement, accountability, risk management, and effective stewardship of resources.

Assurance Framework

IAO expresses audit conclusions using a standard assurance scale:

Level	Meaning
🟢 Substantial assurance	Controls are well designed and operating effectively
🟡 Moderate assurance	Controls are generally adequate and functioning, with improvements needed
🟠 Limited assurance	Important control weaknesses require management attention and may affect achievement of objectives
🔴 No assurance	Controls require substantial improvement and objectives may be exposed to elevated risk

This framework ensures consistency and comparability across all audit reports.

Common Areas for Strengthening to Opportunities for Strengthening Operational Effectiveness

Across the audit portfolio, governance, risk management and control processes are generally in place and operating effectively in many areas. Audits also identified examples of effective practices across audited entities. The themes below reflect recurring areas where additional strengthening would further enhance effectiveness and consistency.

Monitoring and Performance Tracking

Monitoring tools are strengthening oversight and reporting. Initiatives are improving tracking of results and deliverables. Opportunities exist to strengthen KPI use and data-driven decision-making.

Procurement Practices

Procurement frameworks & review mechanisms are established. Strengthened monitoring practices were identified in several operations. Opportunities exist to improve consistency in selection processes.

Governance and Accountability

Governance & approval frameworks support operational delivery. Coordination initiatives supported collaboration across support functions. Opportunities exist to strengthen oversight & accountability.

Risk Management

Risk management and continuity arrangements are generally established. Risk management practices generally support operational planning. Opportunities exist to strengthen ownership and monitoring.

Financial and Control Processes

Financial controls generally support operational delivery. Verification and oversight controls operate across key processes. Opportunities exist to strengthen documentation and control consistency.

Examples of Effective Practices

Audits also identified examples of effective practices and initiatives that support organizational effectiveness and continuous improvement.

Examples included:

Strengthened procurement review and monitoring practices in several offices;
Development of monitoring and evaluation tools to improve project oversight and reporting;
Improved coordination and resource-sharing arrangements across support functions;
Proactive planning for future programme and country-level priorities;
Development of operational tools and dashboards to support travel planning, transparency and management oversight;
Positive engagement by management in implementing audit recommendations and strengthening internal controls.

These practices provide a foundation for continued improvement and organizational learning across the ILO.

Overall Conclusion

Governance, risk management and internal control processes are generally adequate and functioning. Audits also identified ongoing improvement initiatives and examples of effective practice alongside opportunities for further strengthening. However, the recurrence of similar themes indicates that:

Improvements are needed to strengthen consistency and discipline in implementation.
Greater focus is needed on monitoring, data use, and accountability.
Opportunities exist to enhance efficiency and reduce operational risk.

Methodology

IAO conducts audits in accordance with the Global Internal Audit Standards (GIAS) issued by the Institute of Internal Auditors.

Audits follow a risk-based approach and typically include:

Review of policies and procedures;
Interviews with key stakeholders;
Analysis of data and transactions;
Testing of controls.

Disclosure

These summaries present high-level results of internal audits. They do not include all detailed findings and should be read as an overview of key issues and recommendations.

Full audit reports are shared in accordance with ILO disclosure policies. These summaries have been cleared for public release.

Continuous Update

This page is updated periodically as new audits are completed.
Common areas for strengthening and portfolio insights evolve over time to reflect emerging risks and areas of focus.