The objective of this audit was to assess the effectiveness of the selected entities’ implementation of arrangements for managing cyber security incidents in accordance with the Protective Security Policy Framework (PSPF) and relevant ASD Cyber Security Guidelines.

The audit examined the financial management of all Special Appropriations in the period 1998-99 to 2002-03, with the exception of those related to Special Accounts and those administered by Government Business Enterprises. The audit objectives were to: identity all Special Appropriations and ascertain which entities are responsible for their financial management and reporting; and assess entities' financial management and reporting of Special Appropriations against the Commonwealth's financial management and reporting frameworks.

Welcome to the last edition of Audit Matters for 2025. I’ve provided some insights in this edition which may help you to focus on a few areas of audit interest in the new year.

Audit work, as you know, is ongoing. We’ll start tabling reports again in mid-late January 2026. Next year you’ll also see some shorter performance audit reports, as part of a trial we’re undertaking to bring reports to the Parliament more quickly. Thanks to those agencies who have worked with us as we trial this new approach. We’re also doing some important work on how we approach performance statements audits in the 21 entities subject to this process. Watch out for our summary report on performance statements early in 2026 — you can subscribe to be notified of release on our website.

I wish you and your teams a restful break over the holiday season after a big year in the public sector. I look forward to seeing you in 2026.

Rona Mellor PSM, Deputy Auditor-General

The objective of the audit was to assess whether the Australian Taxation Office (ATO) has effectively managed risks related to the rapid implementation of COVID-19 economic response measures.

The audit objective was to assess the effectiveness of the Department of Defence’s administration of investigations and inquiries.

The objective of the audit was to assess whether the Department of Infrastructure, Transport, Regional Development, Communications and the Arts’ management of service delivery arrangements for the external territories was effective.

The audit objective was to assess the effectiveness of the Australian Taxation Office's External Compliance Assurance Process pilot conducted with large business taxpayers.

The objective of the audit was to assess the ATO's administration of the Surcharge. Specifically, the audit sought to: report on the environment into which the Surcharge was introduced, including the legislative intent behind the Surcharge, and the current Surcharge environment; examine and report on aspects of Surcharge governance; assess the systems, processes and controls the ATO uses to: match Member Contributions Statements (MCS) data with income tax return data using Tax File Numbers (TFNs); process Surcharge information; and issue Surcharge liability assessments. assess the mechanisms the ATO uses to assess, classify, manage and rectify existing Surcharge exceptions, and prevent future exceptions from occurring; and examine the mechanisms and strategies the ATO uses to provide assurance that members and holders of contributions are complying with their Surcharge obligations.

The objective of the audit was to assess whether selected Commonwealth organisations had utilised better practice principles when establishing the role, and managing the use of their internal audit groups. In order to evaluate internal audit, the Australian National Audit Office (ANAO) first considered the status and accountabilities of internal audit within the overall governance framework of the organisations audited, in particular its accountabilities to the audit committee.

The objective of the audit was to examine the Department of Agriculture, Water and the Environment’s effectiveness in implementing the Regional Land Partnerships program.