The objective of the audit was to assess whether FaCS had established effective business arrangements with Centrelink to help ensure that new claims for Age Pension were properly assessed in accordance with the Social Security Law and the Guide to the Social Security Law. In the context of the audit objective, the primary issues examined were whether FaCS had:

• established an appropriate business framework;
• adopted an appropriate risk management approach;
• appropriately monitored and evaluated performance; and
• provided relevant business support to Centrelink.

The audit reviewed the implementation of the Whole-of-Government Information Technology Infrastructure Consolidation and Outsourcing Initiative (IT Initiative). The objectives of the audit were to examine the administrative and financial effectiveness of the implementation of the IT Initiative, with the focus being on the first four tenders conducted. Accordingly, the audit assessed:

• the effectiveness of the overall planning and implementation of the IT Initiative, taking into account the tendering, contracting and monitoring processes undertaken in respect of Cluster 3, DEETYA/EN, ATO and Group 5;
• the extent to which those latter processes have contributed to the achievement of the objectives of the IT Initiative; and
• the extent to which the Commonwealth's interests have been adequately protected within this context.

The audit examined whether the Department of Health and Ageing had the performance information necessary to administer the Australian Health Care Agreements. A strong focus of the audit was accountability for performance given the significant size of Commonwealth financial assistance, more than $29.6 billion over 5 years, provided to the States and Territories for the provision of health care services.

The objective of the audit was to assess the Department of Agriculture, Water and the Environment’s effectiveness in responding to non-compliance with plant and animal biosecurity requirements.

The audit objective was to assess the effectiveness of the National Health and Medical Research Council's governance and administrative systems. In order to achieve this objective, the audit addressed three criteria to determine whether the Council had: identified its legislated responsibilities and monitored its legislative compliance; a sound corporate governance framework to support the performance of its legislated functions; and established robust administrative systems to support the performance of its legislated functions.

The main objectives of the audit were to assess the management and administration of protective security across Commonwealth agencies and to identify, recommend and report better practice in security management. Particular attention was paid to:

• compliance with Government policy, standards and guidelines;
• the role of management in protective security; and
• the operation of security systems and practices.

The audit criteria and procedures to assess the management and administration of the individual organisations examined were largely based on the overall control framework of an organisation and the guidance provided in the current Commonwealth Protective Security Manual.

The audit reviewed the processes involved in the sale of one-third of Telstra. The objectives in auditing the sale were to assess the extent to which the Government's sale objectives were achieved; assess the effectiveness of the management of the share offer; assess whether the sale arrangements adequately protected the Commonwealth's interests; and facilitate improved administrative arrangements for future share offers.

The audit assessed whether Centrelink has effective Business Continuity Management and/or associated risk management procedures and plans in place that: minimise the likelihood of a significant business outage; and in the event of such an outage, minimise disruption of critical services to customers. The audit also assessed whether Centrelink services satisfy special community demands in times of emergency.

This cross-portfolio audit reviewed the management of Internet security across ten Commonwealth agencies, with the objective of forming an opinion on the adequacy of Internet security management within the selected agencies. The audit pursued two strands - a review of the management systems employed within agencies including the adequacy of risk assessments, security policies and plans, day to day management and business continuity planning in connection with the agencies' Internet presence, and physical testing of the security arrangements of selected Internet sites. Staff from the Defence Signals Directorate were appointed under the Auditor-General Act 1997 to perform the site testing.

The objective of the audit was to examine Coastwatch's administration of the Australian civil coastal and offshore surveillance and response service. In particular, the audit focused on Coastwatch's:

• coordination with its clients and external service providers;
• surveillance and response operations; and
• aspects of its corporate governance arrangements bearing on performance and associated accountability.