Internal Audit and Investigations

Internal audit: enhancing risk management and the quality of internal controls in FAO

Understanding the role of Internal Audits within FAO

OIG’s internal audit branch, OIGA, plays a pivotal role in helping to strengthen operational efficiency and the control environment within FAO. It does so by bringing a systematic, disciplined approach to evaluate and improve the effectiveness of the Organization’s risk management, control and governance processes. For example, OIGA may review whether the Organization is using its resources as efficiently as possible, or whether it is adequately managing key risks which may hinder the achievement of FAO objectives.

Internal audit activities cover all FAO operations, across all locations and organizational functions. The decision to audit a particular office, activity or function (collectively called “auditable entities”) is made based on a risk assessment conducted by OIGA. As audit resources are limited, OIGA applies a methodology to prioritize audit engagements from among its risk-ranked auditable entities.

Internal audit also plays a critical role in promoting a culture of accountability and continuous improvement within FAO. It helps ensure that all personnel are aware of their responsibilities and are held accountable for their performance. OIGA encourages all personnel to look for ways to improve their work and contribute to the Organization's overall success.

OIGA consists of two units: the Assurance Unit, which focuses on audits of headquarters entities, thematic areas and Decentralized Offices; and the Advisory and Professional Practices Unit, which undertakes advisory and capacity-building engagements in the Organization, in addition to enhancing professional practices and development, quality assurance and innovation in OIGA.

The ultimate goal of internal audit is to add value to FAO and enhance the Organization’s ability to achieve its mission. By identifying risks; recommending improvements in internal controls; and promoting accountability and continuous improvement, internal audit helps ensure that FAO is operating as efficiently and effectively as possible while maintaining a robust control environment.

FAO's internal audit process: a brief guide from procedure to disclosure
1. Internal audit as the driving force in enhancing organizational governance

Internal audit is an independent, objective assurance and advisory activity designed to add value and improve an organization's operations. Internal audit is thus a crucial part of organizational governance. OIG’s Internal Audit Branch is responsible for conducting internal audits at FAO in accordance with international standards.

2. Internal audit work planning and execution

Internal audit workplan is based on a risk assessment methodology and institutional knowledge. The workplan reflects the priorities of the Organization and is designed to adapt to evolving needs. Audits are performed by OIGA’s Assurance Unit across FAO's headquarters and decentralised offices globally using a systematic and disciplined approach.

3. Audit follow-up

Upon the completion of each audit engagement, the focus shifts to the follow-up phase, a critical component of OIG’s commitment towards continual improvement. OIG tracks and supports the implementation of Management Action Plans developed by FAO management to address identified residual risks and control gaps.

4. Beyond auditing: the extended role of the internal auditors

OIGA extends its services beyond scheduled audit engagements. It provides expert advisory and capacity-building services, offering management advice, risk mitigation solutions, and support in implementing key organisational reform initiatives. OIGA’s Advisory and Professional Practices Unit is also tasked with enhancing innovation and quality improvement in OIGA’s work.

5. Promoting transparency: how to access information on FAO's audits

In the spirit of transparency and accountability, comprehensive information about OIG’s internal audits is made publicly available. OIG’s Annual Reports and summaries of all audit reports can be accessed on OIG’s website. Full audit reports are available to FAO members and resource partners on request.

OIGA extends its activities beyond audit assurance engagements by providing expert advisory and capacity-building services. Advisory services are services through which internal auditors provide advice to the Director-General and management without providing assurance or taking on management responsibilities. The nature and scope of advisory services are subject to agreement with management. Examples include advising on the design and implementation of new policies, processes, and systems; undertaking ad-hoc reviews of contracts and agreements; providing training; facilitating discussions about risks and controls; or serving as an observer on committees, task forces and/or working groups. OIGA’s Advisory and Professional Practices Unit is also tasked with enhancing innovation and quality improvement in OIGA’s work.

Audit of FAO Representation in Central African Republic
11/2024

This audit identified critical gaps in governance, risk management, input distribution, and capacity, highlighting areas needing urgent improvement.

Audit of the Corporate Environmental Responsibility Strategy 2020–2030
10/2024

The audit identified 4 risks (1 high, 3 moderate) in FAO's Corporate Environmental Responsibility Strategy, citing gaps in governance, leadership, resources,...

Audit of FAO’s management of the Green Climate Fund portfolio
10/2024

The audit identified 6 moderate risks in FAO’s Green Climate Fund management, including governance gaps, unclear roles, pipeline delays, and fee processes.

Audit of the Implementation of FAO’s Framework on Environmental and Social Management
09/2024

The audit identified 4 risks (2 high, 2 moderate) in FAO's Environmental and Social Management Framework, affecting governance, capacity, and monitoring.

Follow-up audit of Letters of Agreement
08/2024

OIG's follow-up audit on FAO’s LoA management (2021–2023) found risks in LoA usage, conflict controls, and monitoring. Four high, three moderate risks.

Audit of the FAO Representation in Nigeria
08/2024

The audit identified 15 risks, with 10 rated as high and 5 as moderate, across procurement and HR management.

Audit of Procurement and Input Distribution in the FAO Ukraine Emergency Operations
06/2024

Eight risks were identified during this audit in the areas of procurement planning, procurement methods and reconciliation of input distribution.

Audit of the FAO Accountability Framework
06/2024

This audit identified 11 risks in the areas of ownership, definition, assessment of effectiveness and oversight of accountability.

Audit of the FAO Representation in Lesotho
07/2024

This audit identified seven observations in project implementation and monitoring, procurement, HR management and inventory management.