The objective of this audit was to determine the extent to which selected agencies have implemented the two recommendations of the previous audit; and the appropriateness of advice provided by Finance and the ATO. To address this audit objective, the audit assessed:

• the roles of Finance and the ATO in clarifying: the interaction of the PB and SG Act; the ongoing role of the PB Act; and mechanisms to monitor Australian Government organisations' compliance with the PB Act;
• the extent to which Finance and the ATO have provided guidance and other support to assist Australian Government organisations manage and meet statutory superannuation obligations for eligible contractors; and
• whether Australian Government organisations have managed and met statutory superannuation obligations for contractors in past and current contracts.

The objective of this audit was to evaluate whether selected Australian Government agencies were effectively managing security risks arising from the use of contractors. To address this objective, the audit evaluated relevant policies and practices in the audited agencies against a series of minimum requirements in the management of security issues in procurement and contracting activity. These minimum requirements were developed from the guidance and standards contained in the PSM and also from the ANAO's previous protective security audits.

The audit focused on two broad types of contracting arrangements: contracting of security functions; and contracting of any service or business function that requires, or which has the potential to require, contractors to access sensitive or security classified information.

The following Australian Government agencies were involved in this audit:

• Australian Customs Service (Customs);
• Commonwealth Superannuation Administration (ComSuper);
• Department of Finance and Administration (Finance); and
• Department of Foreign Affairs and Trade (DFAT).

In addition, the Attorney-General's Department, which is responsible for the maintenance of the PSM and for providing advice on contemporary protective security policies and practices, was consulted during the audit.

The objective of the audit was to:

• assess, in a selection of FMA Act and CAC Act agencies, how well the revised Commonwealth Procurement Guidelines had been implemented; and
• identify any better practice or common problem areas to assist other agencies in their future procurement activities.

The audit focused on procurement requirements that had changed as a result of the revised CPGs, rather than being a more general audit of compliance with all procurement requirements.
The audit was conducted in the following entities:

• Australian Federal Police;
• Bureau of Meteorology;
• Commonwealth Scientific and Industrial Research Organisation (CSIRO);
• Department of Defence;
• Department of Education, Science & Training;
• Family Court of Australia; and
• National Museum of Australia.