Published: June 2023
Sector: State and local government entities
All entities should seek to strengthen the maturity (efficiency and effectiveness) of their risk management internal controls.
Our maturity model enables entities to identify the maturity level they want to achieve, and thus focus on key areas for development. The model also makes it easier to share better practices across the public sector.
Entities’ results of their self-assessments should also be reported to audit committees or other relevant oversight bodies.
We developed this model as part of our report Education 2022 (Report 16: 2022–23). It supersedes the original model the Queensland Audit Office developed as part of Results of audit: education sector entities 2015 (Report 18: 2015–16), where we assessed the maturity of universities' risk management practices.
Related resources
-
Published: November 2023
- Sector:
State and local government entities
Our self-assessment tool helps entities to easily identify areas where they can improve their fraud controls and focus resources for detection on high-risk areas. These controls form a key part of their fraud risk management frameworks.
-
Published: November 2023
- Sector:
State and local government entities
Our fraud model helps entities document their assessments of fraud risk, as well as how they will control, monitor, and report on the risks. It gives entities a methodology to follow for their assessments.
-
Published: October 2021
- Sector:
State and local government entities
Our internal control assessment tool aims to help entities understand and evaluate their internal controls. It allows them to identify where they sit on a maturity scale for effective internal controls, and highlights areas for targeted improvement.