The audit objective was to re-assess the three entities' compliance with the 'Top Four' mandatory strategies in the Australian Government Information Security Manual (ISM). The audit also aims to examine the typical challenges faced by entities to achieve and maintain their desired ICT security posture.

The audit objective was to assess whether the Department of Immigration and Border Protection adopted sound contract management practices for the delivery of garrison support and welfare services for offshore processing centres in Nauru and Manus Island.

The objective of the audit was to assess whether select Australian Government entities are effectively managing and controlling the use of Commonwealth credit and other transaction cards for official purposes in accordance with legislative and policy requirements.

The objective of the audit was to assess whether the Department of Immigration and Border Protection (DIBP) had appropriately managed the procurement of garrison support and welfare services at offshore processing centres in Nauru and Papua New Guinea (Manus Island); and whether the processes adopted met the requirements of the Commonwealth Procurement Rules (CPRs) including consideration and achievement of value for money.