5
The Chief Internal Auditor submitted a report providing a summary of internal audit activity undertaken in partner organisations during 1 April to 31 December 2019.
The report intimated that the IJB directed both Renfrewshire Council and NHSGG&C to deliver services that enabled the IJB to deliver on its strategic plan. Both Renfrewshire Council and NHSGG&C had internal audit functions and conducted audits across each organisation, the findings of which were reported to the respective audit committees. Members of the IJB had an interest in the outcomes of the audits at both Renfrewshire Council and NHSGG&C that impacted upon the IJB’s ability to deliver the strategic plan or support corporate functions.
In relation to internal audit activity within Renfrewshire Council, the report provided detail on reports submitted to the Council’s Audit, Risk and Scrutiny Board which were relevant to the IJB; contract management for home care; GDPR and the Data Protection Act 2018; the quick quote process; key financial controls and payroll.
In relation to internal audit activity within NHSGG&C, the report provided detail on reports submitted to the NHSGG&C Audit Committee; delayed discharges; financial systems health check; the grievance process and IT security.
It was noted that a new grievance policy would be implemented in NHSGG&C from 1 March 2020 which would tighten up processes and that staff awareness sessions were currently underway. It was further noted that, in relation to delayed discharges, NHS internal audit would follow-up on one specific aspect of the process.
It was proposed that the Chief Internal Auditor request further information from the NHSGG&C internal audit team on the improvements undertaken in IT security since publication of the internal audit report and that this be included in a future report to the IJB Audit Committee. This was agreed.
DECIDED:
(a) That the report be noted; and
(b) That the Chief Internal Auditor request further information from the NHSGG&C internal audit team on the improvements undertaken in IT security since publication of the internal audit report and that this be included in a future report to the IJB Audit Committee.