114 – 3 – SUPREME AUDIT INSTITUTIONS’ INPUT INTO POLICY IMPLEMENTATION
Box 3.4. The SAI of Brazil – assessing the maturity of risk management in the Federal Government (continued) Outcomes The institutions participating in the survey were classified into five groups of maturity of risk management. It was found that 67% of organisations were in the bottom two levels of maturity in risk management, and only 9% of the sample had reached the most advanced stage. The average maturity level was 43%: it was higher in the oil (61%) and financial sectors (65%) and lower in transportation (28%) and regulatory agencies (31%) sectors. As this was a survey to gather information no recommendations were made. Each entity received a brief report indicating possible areas for improvement of risk management based on the answers they provided. However, from the 65 organisations surveyed, seven were selected for a risk management audit. The survey revealed the situation of risk management in the consulted organisations based on responses provided by these entities without the requirement to provide evidence. The audits that have followed the survey are investigating more precisely the degree of maturity of risk management in these organisations. The monitoring of these audits will make it possible to verify the impact of the initial study. Informal feedback to TCU suggests that entities have established risk management policies or departments to help better co-ordinate implementation after participating in the TCU survey.
Good practices used This study’s auditing criteria could prove as useful guidance for public entities for their own risk management. Using this criteria to form questions about best practices in risk management demonstrated the importance of risk management for good governance to participating public organisations.
Lessons learned A questionnaire for risk management must be accompanied by a text that explains the audit criteria (i.e. a standard that defines a mature risk management) developed. It is estimated that in some cases, the answers provided did not correspond to reality because of a failure to understand the meaning of questionnaire items.
Further reading http://portal2.tcu.gov.br/portal/page/portal/TCU/comunidades/programas_governo/areas_atua cao/administracao_publica/Relatorio_Levantamento_28062013_final.pdf. www.tcu.gov.br/Consultas/Juris/Docs/judoc/Acord/20130916/AC_2467_35_13_P.doc. Source: OECD Survey of Peer Supreme Audit Institutions; further reading links above.
SUPREME AUDIT INSTITUTIONS AND GOOD GOVERNANCE: OVERSIGHT, INSIGHT AND FORESIGHT © OECD 2016