CSIS Internal Audit and Evaluation Branch / Disclosure of Wrongdoing and Reprisal Protection

The Internal Audit and Evaluation (IAE) Branch is composed of two sections: the Internal Audit and Evaluation Sections. The Internal Audit Section supports the branch mission by providing risk-based and objective assurance, advice and insight on risk management strategies and practices. Whereas the Evaluation Section provides neutral and credible information to inform decision-making, manage results and improve programs. The IAE Branch is led by the Chief Audit and Evaluation Executive (CAEE), who reports to the CSIS Director and to the CSIS Departmental Audit Committee (DAC) for internal audit activities and to the Performance Measurement and Evaluation Committee (PMEC) as Head of Evaluation. The CAEE is also the Senior Officer for Disclosure of Wrongdoing.

The IAE Branch is subject to the Treasury Board Policy on Internal Audit, the Treasury Board Directive on Internal Audit, the Treasury Board Policy on Results, the IAE Branch’s mission and the mandatory elements of the Institute of Internal Auditors’ (IIA) International Professional Practices Framework (IPPF).

The DAC, comprised of both internal and external members, examines CSIS’ performance in the areas of risk management, control and governance processes relating to both operational activities and administrative services. By maintaining high standards in relation to its review function, in particular following-up on the implementation of management action plans derived from audit recommendations, the DAC supports and enhances the independence of the audit function.

The PMEC, comprised of internal Senior Officials, provides the Director with advice and recommendations on the respective availability, quality, utility, and use of performance information including evaluation. The evaluation function is supported by PMEC in areas such as follow-up on management action plans resulting from evaluation recommendations.

In the capacity of Senior Officer for Disclosure of Wrongdoing, the CAEE is responsible for administering the Internal Disclosure of Wrongdoing and Reprisal Protection Policy. The Policy provides a confidential mechanism for employees to come forward if they believe that wrongdoing has taken place. It also provides protection against reprisal when employees come forward, and ensures a fair and objective process for those against whom allegations are made.