Professional Documents
Culture Documents
This report has been prepared on the basis of the limitations set out on page 19.
Contents
Page
Executive Summary
17
18
Statement of Responsibility
19
This report and the work connected therewith are subject to the Terms and Conditions of the contract dated 20/06/2007
between Greater London Authority and Deloitte & Touche Public Sector Internal Audit Limited. The report is produced
solely for the use of Greater London Authority. Its contents should not be quoted or referred to in whole or in part without
our prior written consent except as required by law. Deloitte & Touche Public Sector Internal Audit Limited will accept no
responsibility to any third party, as the report has not been prepared, and is not intended for any other purpose.
Appendix 6g
Executive Summary
Introduction & Background
1.
This audit forms part of the 2007/08 Internal Audit Plan, which has been
approved by the Mayor and the Audit Panel. The audit formed part of the
2007/08 internal audit plan, however due to a change in the taxi card
accounts system provider following the audit, further testing was
performed on the new system, therefore this report is agreed with
management to be issued during 2008/09.
2.
The plan entails a review of the systems and controls operating over the
management and administration of expenses incurred by the Mayor,
Assembly Members, and officers of the Greater London Authority (GLA).
This audit has also incorporated a review of the administration of the
GLAs taxi card accounts system.
3.
Section 127 of the Greater London Authority Act (GLA) 1999 empowers
the Director of Resources to issue an Expenses and Benefits Framework
to promote the proper administration of the financial affairs of the
Authority. Currently, the communicated framework document is dated
January 2007. The Framework stipulates that as a rule, expense claims
should only be for travel and subsistence and not as a means of avoiding
the ordering process.
4.
The Framework sets out the procedures for dealing with expenses at the
GLA and as a general rule travel and subsistence are the only expenses
that should be claimed back. It also encourages the use of public
transport by GLA employees; however, taxi cards are available to
Members, Executive Directors, and Senior Officers, to enable them to
use the taxi service provided by the contractor, Greater London Hire Ltd.
(GLH).
5.
6.
7.
9.
The Expenses and Benefits Framework also contains guidelines for the
users of taxi card accounts.
10.
11.
At the time of the audit, it was identified that staff are working from the
last updated Framework (January 2007), which is available on the
intranet. It was noted that a comprehensive review of the Framework is
currently underway to reflect the requirements of the new Mayor and
London Assembly. The current communicated version does not include
information regarding the new taxi company.
12.
13.
14.
16.
The framework states that petty cash advances may be given to officers
for incidental expenses incurred during the course of normal GLA
business; for example foreign trips of 3 days or more. Where a petty
cash advance is requested, finance is notified in advance, stating the
reason, value, and when it is required. A standard Petty Cash Advance
form is then completed by the claimant and authorised by an appropriate
signatory detailing the amount required. This form is presented to
Financial Services for the advance to be paid.
17.
In testing of five petty cash advances, it was identified that each was
authorised appropriately.
18.
Corporate credit cards are issued to eight senior officers to facilitate the
purchasing of goods and services in emergencies, and to those staff
frequently travelling abroad. Usage of the credit cards is to be performed
in accordance with the Expenses and Benefits Framework guidelines.
19.
On receipt of the monthly credit card statement for all GLA expenditure,
all credit card holders are required to complete a standard credit card
transaction log sheet, which details the purchases and expenses
incurred, and to which supporting documents and/or receipts are to be
attached. The log sheet is approved by the appropriate Head of the
department, before it is returned to Financial Services for processing.
20.
It was identified that there were some instances (eight from the sample of
20) where transactions were ordered via the corporate credit card, which
may have been ordered via the normal purchasing process.
In
accordance with the Expenses and Benefits Framework this is
discouraged, however as guidance was in the process of being updated
and communicated, no recommendation is raised (as per earlier
paragraph).
21.
22.
Furthermore there were 2 circumstances where the claimant was not the
corporate card holder. After discussions with the Head of Financial
Services, he stated that his card is a corporate card and as such will be
used for other staff members. When the guidance is updated this issue
should be addressed.
Two recommendations have been raised as a result of our review of this
area.
Validity of Taxi Account Journeys
23.
Greater London Hire Ltd have been appointed by the GLA to provide taxi
services to the Mayor, Assembly Members, Directors, and other Senior
officers, where public transport is unavailable or not practical. According
to the draft Framework, all officers, with the exception of the Head of
Financial Services, are to use taxis strictly on official GLA business and
not to share their cards with other staff.
24.
GLH provides monthly invoices and statements to the GLA showing the
taxi fares that have been registered on each cardholders account.
25.
26.
27.
Whilst it was evident that many declaration memos and journey forms
were completed and sent to Finance, at the time of audit it was noted that
this was not always the case, with returns not being available in eight out
of 20 cases tested. In five circumstances the invoices relate to Assembly
Members, two related to the Director of Resources and one was for the
Director of Media and Marketing.
28.
29.
30.
31.
GLH monthly invoices and account details are checked for completeness
and accuracy by exchequer services, and are date stamped upon receipt
to confirm when they were received. Audit testing identified that 18 out of
20 invoices tested had a visible exchequer stamp on the invoice. The 5
most recent invoices tested, from April and May 2008, do not have
stamps because Finance retains the invoices as e-copies. There were
also two un-stamped hardcopy invoices from the 2007/08 period; before
the introduction of the e-copy invoicing. A recommendation has been
raised in respect of checks being evidenced.
Two recommendations have been raised as a result of our review of this
area.
Processing and Authorisation
32.
33.
Staff claims of less than 10 should be paid via the petty cash system
and expenses of a greater value than this are paid via payroll. All claims
once authorised are passed to Financial Services to be checked for
completeness and arithmetical accuracy.
This check should be
evidenced by the officer carrying out the check with their signature and
date. In 17 out of 20 expense claims forms tested, appropriate
authorisation was obtained. Of the exceptions, as stated earlier, one form
had the authorising signatory signing the form the previous day to the
claimant. One form did not have the individual arithmetic and coding
checks signed off, but the overall Financial Services section was signed
off. The above has already been addressed, as previously mentioned,
therefore no further recommendation is raised. Audit findings identified
35.
36.
On review of the credit card authorisation it was evident that when the
Exchequer Accountant had not received a signed log sheet, or
appropriate supporting documentation i.e. receipts, then the items are
temporarily placed in the suspense account. There is no specific
guidance as to how long these items can remain on the account, but the
Exchequer Officer stated that the normal maximum timeframe is one
month. A recommendation has already been raised under validity of
expense claims; refer to recommendation three.
One recommendation has been raised following our review of this area.
Payment of Expense Claim
37.
that have been paid for the period. The Exchequer Accountant
reconciles the report to the expenses spreadsheet that is maintained by
Financial Services.
Audit testing confirmed that the expenses
spreadsheet is updated monthly and authorised by the Finance Manager
and is reconciled back to the payroll report from Northgate by the
Exchequer officer in a timely manner.
38.
39.
Substantial
Assurance
Limited
Assurance
Weaknesses in the system of controls are such as to put the system objectives
at risk,
and/or the level of non-compliance puts the system objectives at risk.
No
Assurance
Priority 2
Priority 3
Minor matters.
(Priority 2)
Rationale
The production of a timetable for updating, approving
and communicating the Expenses and Benefits
Framework will help to ensure that necessary
changes are communicated to staff in a timely manner
to reflect structural and process changes within the
GLA.
Audit testing identified there to be a draft copy
(version 11) that was last reviewed in January 2007.
The Expenses and Benefits Framework is currently
under review. In addition to this, the previous Taxi
firm (ComCab) template was still found to be in use.
Lack of communication of reviewed and updated
procedures increases the risk that guidance does not
reflect current practices and inconsistent or ineffective
practices are adopted that fail to meet management
objectives.
Management response:
Agreed.
The Expenses and Benefits framework as it applies to the Mayor, the Assembly,
and staff has been revised and is to be submitted to the Mayor and the
Assembly for approval by 31 March 2009.
2. Procedure Manual
Recommendation
It is recommended that guidance
specific to processing of expense
claims should be established
within the Exchequer department.
This
guidance
should
be
developed in line with the
Expenses
and
Benefits
Framework.
(Priority 3)
Rationale
Management response:
Agreed.
Written procedures on the processing of expense claims will be prepared for the
Exchequer team.
Deadline: 31 March 2009.
Recommendation
There
should
be
regular
monitoring
of
return
of
transaction
log
sheets
for
corporate
credit
card
expenditure.
(Priority 2)
Rationale
According to the Framework, details of all purchases
and expenses shown on the statement for the credit
card must be recorded on the credit card transaction
log sheet and transaction receipts must be submitted
to core finance.
Management response:
Disagreed.
This is already in place, as the credit card expenses cannot be coded on to the
Directorates cost code if the credit card transaction log is absent. The costs on
any missing transaction logs are coded to suspense, card holder is chased and
suspense cleared down when the information is received.
4.
Recommendation
(Priority 3)
Rationale
Foreign travel authorisation forms All foreign travel expenses should be appropriately
need to be completed, authorised authorised prior to the journey in accordance with the
and filed before the journey takes Expenses and Benefits Framework.
place.
Audit identified that for one circumstance from a
sample of 20 expense claims that involved foreign
travel, there was no foreign travel expense form on
file.
There is a risk that employees could be travelling to
unauthorised destinations at a cost to the GLA.
Management response:
Agreed.
All GLA staff will be reminded of the need to obtain approval prior to committing to
travel expenditure.
Deadline: Staff will reminded of the need to obtain prior approval to travel as part
of the re-launch of the revised Expenses and Benefits framework. 31 March
2009.
(Priority 2)
Rationale
As per the Expenses and Benefits Framework, the
(taxi journey) declaration must be signed, and the
completed form must be returned within 2 weeks of
receipt of the statement. Monitoring of the returned
forms helps to ensure that correctly completed and
authorised forms are returned in a timely manner.
Audit testing showed that completed declaration
memos and journey forms were maintained within the
Exchequer department, however audit was unable to
obtain documentary evidence in eight out of 20 cases
selected. At the time of the audit according to a
spreadsheet maintained by the Exchequer
accountant, 32 forms were still outstanding, dating
back to September 2007.
In the event that declaration memos are not duly
completed and signed by the claimant, there is a risk
that the GLA will not be reimbursed for private
journeys.
Management response:
Agreed.
The current process will be reviewed and escalation procedures implemented for
Senior Staff and Elected Officials who fail to submit their declarations on time.
Deadline: By 31st March 2009.
(Priority 3)
Rationale
Staff should be reminded to date Date stamping of invoices helps exchequer services
stamp all taxi account invoices to monitor the timeliness of processing and
received by exchequer services.
payment.
Audit testing identified that 18 out of 20 invoices
tested had a visible exchequer stamp on the
invoice, however two invoices had no evident date
stamp.
In the event that invoices are not date stamped,
there is an increased risk that exchequer services
will not be able to monitor the timeliness of
processing invoices and making payments.
Management response:
Agreed.
A reminder will be issued by the Finance Manager, Exchequer to remind
Exchequer staff of the need to date stamp all invoices.
Deadline: By 28 February 2009.
(Priority 3)
Rationale
Updating claim forms to include generation of a
unique reference number and sign off by both the
Finance officer and the Claimant, will help to ensure
that a clear audit trail is maintained for all petty cash
issues.
Audit findings identified there to be no provision on
the Expense Claim Form and Petty Cash Advance
Form for the Exchequer officer to evidence that the
advance has been given to the Claimant. Audit also
observed that the standard spreadsheet used for
recording petty cash transactions could be enhanced
through recording of a description as to what the cash
relates to, voucher number, and date cash was
provided.
Where there is no clear audit trail as to the
reimbursement of Petty Cash and the payment of
cash advances, there is a risk that misappropriation of
funds may go undetected.
Management response:
Agreed that all petty cash payments will be allocated a unique reference number
The petty cash advance form will be amended to capture the reason for the
advance and the signature of the Finance Officer issuing the advance.
Deadline: 31 March 2009.
Areas Covered
Audit work was undertaken to cover controls in the following areas:
Statement of Responsibility
We take responsibility for this report which is prepared on the basis of the limitations
set out below.
The matters raised in this report are only those which came to our attention during
the course of our internal audit work and are not necessarily a comprehensive
statement of all the weaknesses that exist or all improvements that might be made.
Recommendations for improvements should be assessed by you for their full impact
before they are implemented. The performance of internal audit work is not and
should not be taken as a substitute for managements responsibilities for the
application of sound management practices. We emphasise that the responsibility for
a sound system of internal controls and the prevention and detection of fraud and
other irregularities rests with management and work performed by internal audit
should not be relied upon to identify all strengths and weaknesses in internal
controls, nor relied upon to identify all circumstances of fraud or irregularity.
Auditors, in conducting their work, are required to have regards to the possibility of
fraud or irregularities. Even sound systems of internal control can only provide
reasonable and not absolute assurance and may not be proof against collusive fraud.
Internal audit procedures are designed to focus on areas as identified by
management as being of greatest risk and significance and as such we rely on
management to provide us full access to their accounting records and transactions
for the purposes of our audit work and to ensure the authenticity of these
documents.
Effective and timely implementation of our recommendations by
management is important for the maintenance of a reliable internal control system.
The assurance level awarded in our internal audit report is not comparable with the
International Standard on Assurance Engagements (ISAE 3000) issued by the
International Audit and Assurance Standards Board.
Deloitte & Touche Public Sector Internal Audit Limited
St Albans
February 2009
In this document references to Deloitte are references to Deloitte & Touche Public
Sector Internal Audit Limited.
Deloitte & Touche Public Sector Internal Audit Limited is a subsidiary of Deloitte LLP,
which is the United Kingdom member firm of Deloitte Touche Tohmatsu. Deloitte
Touche Tohmatsu is a Swiss Verein (association), and, as such, neither Deloitte
Touche Tohmatsu nor any of it member firms has any liability for each others acts or
omissions. Each of the member firms is a separate and independent legal entity
operating under the names Deloitte, Deloitte Touche Tohmatsu, or other related
names. Services are provided by the member firms or their subsidiaries or affiliates
and not by the Deloitte Touche Tohmatsu Verein.
2009 Deloitte & Touche Public Sector Internal Audit Limited. All rights reserved.
Deloitte & Touche Public Sector Internal Audit Limited is registered in England and
Wales with registered number 4585162. Registered office: Hill House, 1 Little New
Street, London EC4A 3TR.