Disclosure of internal audit reports

Disclosure Policies

UNDP is committed to organizational transparency. In accordance with decision 2012/18 of its Executive Board, UNDP is publishing the audit reports issued by its Office of Audit and Investigations (OAI) as from 1 December 2012.

The policy for the disclosure of audit reports issued by OAI has evolved over the years. This page describes which disclosure policy is applicable over which period in time.

Questions regarding the disclosure of internal audit reports should be directed to OAI through the following email address: audit.disclosure@undp.org.

For internal audit reports issued since 1 December 2012

In accordance with Executive Board decision 2012/18 of June 2012, all audit reports issued by UNDP Office of Audit and Investigations (OAI) since 1 December 2012 are publicly disclosed on this website, one month after they have been issued internally.

For internal audit reports issued between 1 July 2012 and 30 November 2012

In accordance with the Executive Board decision 2012/18 the executive summaries of internal audit reports are publicily available on this website.

The access of the full contents of an internal audit report issued between 1 July and 30 November 2012 is done in accordance with the process described below.

For internal audit reports issued between 1 October 2008 and 30 June 2012

The disclosure of internal audit reports to Member States and to eligible donors is governed by the UNDP oversight policy and related decisions of the UNDP Executive Board. Requests for access to internal audit reports should be made in writing to the UNDP Administrator, with a copy to the Director of the Office of Audit and Investigations (OAI), stating the reason and purpose for the request and confirming adherence to the procedures for disclosure of internal audit reports, including confidentiality. For details of the disclosure process, see document "Procedures for disclosure of internal audit reports".

List of Internal Audit Reports Issued between Oct 2008 and Nov 2012

Procedures for Disclosure of Internal Audit Reports issued before 1 December 2012

Audit Ratings

Based on its audit results, OAI assigns an overall rating for the business unit audited. OAI uses four rating categories: “fully satisfactory”; “satisfactory/some improvement needed”; “partially satisfactory/major improvement needed”; and “unsatisfactory”. A definition of each audit rating is available below.

Audit Ratings - Definition

A rating of "fully satisfactory" means that the assessed governance arrangements, risk management practices and controls were adequately established and functioning well. Issues identified by the audit, if any, are unlikely to affect the achievement of the objectives of the audited entity/area.

A rating of “satisfactory/some improvement needed” means that the assessed governance arrangements, risk management practices and controls were generally established and functioning but need some improvement. Issues identified by the audit do not significantly affect the achievement of the objectives of the audited entity/area.

A rating of “partially satisfactory/major improvement needed” means that the assessed governance arrangements, risk management practices and controls were established and functioning, but need major improvement. Issues identified by the audit could significantly affect the achievement of the objectives of the audited entity/area.

A rating of “unsatisfactory” means that the assessed governance arrangements, risk management practices and controls were either not adequately established or not functioning well. Issues identified by the audit could seriously compromise the achievement of the objectives of the audited entity/area.