Internal Audit and Investigations

Internal audit: enhancing risk management and the quality of internal controls in FAO

Understanding the role of Internal Audits within FAO

OIG’s internal audit branch, OIGA, plays a pivotal role in helping to strengthen operational efficiency and the control environment within FAO. It does so by bringing a systematic, disciplined approach to evaluate and improve the effectiveness of the Organization’s risk management, control and governance processes. For example, OIGA may review whether the Organization is using its resources as efficiently as possible, or whether it is adequately managing key risks which may hinder the achievement of FAO objectives.

Internal audit activities cover all FAO operations, across all locations and organizational functions. The decision to audit a particular office, activity or function (collectively called “auditable entities”) is made based on a risk assessment conducted by OIGA. As audit resources are limited, OIGA applies a methodology to prioritize audit engagements from among its risk-ranked auditable entities.

Internal audit also plays a critical role in promoting a culture of accountability and continuous improvement within FAO. It helps ensure that all personnel are aware of their responsibilities and are held accountable for their performance. OIGA encourages all personnel to look for ways to improve their work and contribute to the Organization's overall success.

OIGA consists of two units: the Assurance Unit, which focuses on audits of headquarters entities, thematic areas and Decentralized Offices; and the Advisory and Professional Practices Unit, which undertakes advisory and capacity-building engagements in the Organization, in addition to enhancing professional practices and development, quality assurance and innovation in OIGA.

The ultimate goal of internal audit is to add value to FAO and enhance the Organization’s ability to achieve its mission. By identifying risks; recommending improvements in internal controls; and promoting accountability and continuous improvement, internal audit helps ensure that FAO is operating as efficiently and effectively as possible while maintaining a robust control environment.

FAO's internal audit process: a brief guide from procedure to disclosure
1. Internal audit as the driving force in enhancing organizational governance

Internal audit is an independent, objective assurance and advisory activity designed to add value and improve an organization's operations. Internal audit is thus a crucial part of organizational governance. OIG’s Internal Audit Branch is responsible for conducting internal audits at FAO in accordance with Global Internal Audit Standards.

2. Internal audit work planning and execution

Internal audit workplan is based on a risk assessment methodology and institutional knowledge. The workplan reflects the priorities of the Organization and is designed to adapt to evolving needs. Audits are performed by OIGA’s Assurance Unit across FAO's headquarters and decentralised offices globally using a systematic and disciplined approach.

3. Audit follow-up

Upon the completion of each audit engagement, the focus shifts to the follow-up phase, a critical component of OIG’s commitment towards continual improvement. OIG tracks and supports the implementation of Management Action Plans developed by FAO management to address identified residual risks and control gaps.

4. Beyond auditing: the extended role of the internal auditors

OIGA extends its services beyond scheduled audit engagements. It provides expert advisory and capacity-building services, offering management advice, risk mitigation solutions, and support in implementing key organisational reform initiatives. OIGA’s Advisory and Professional Practices Unit is also tasked with enhancing innovation and quality improvement in OIGA’s work.

5. Promoting transparency: how to access information on FAO's audits

In the spirit of transparency and accountability, comprehensive information about OIG’s internal audits is made publicly available. OIG’s Annual Reports and summaries of all audit reports can be accessed on OIG’s website. Full audit reports are available to FAO members and resource partners on request.

OIGA extends its activities beyond audit assurance engagements by providing expert advisory and capacity-building services. Advisory services are services through which internal auditors provide advice to the Director-General and management without providing assurance or taking on management responsibilities. The nature and scope of advisory services are subject to agreement with management. Examples include advising on the design and implementation of new policies, processes, and systems; undertaking ad-hoc reviews of contracts and agreements; providing training; facilitating discussions about risks and controls; or serving as an observer on committees, task forces and/or working groups. OIGA’s Advisory and Professional Practices Unit is also tasked with enhancing innovation and quality improvement in OIGA’s work.

AUD1125 Audit of Gender-Responsive Practices in the Asia and Pacific Region
12/2025

The audit identified two risks, rated as moderate. If not addressed, they may affect the achievement of certain governance, risk management or internal...

AUD1025 Audit of the FAO Representation in Viet Nam
10/2025

The audit identified 18 risks, of which 15 were rated as high and 3 as moderate. If not addressed, they will hinder the achievement of some critical...

AUD0925 Audit of the FAO Subregional Office in Central Africa and FAO Representation in Gabon
10/2025

Identified weaknesses in the existing structures, policies and procedures negatively impact the effective mitigation of key risks. The audit identified...

AUD0825 Audit of the FAO Representation in Guatemala
10/2025

The audit identified 14 risks, of which 9 were rated as high and 5 as moderate. If not addressed, they will hinder the achievement of some critical...

AUD0725 Audit of Recruitment of General Service Staff
10/2025

The audit identified six high and two moderate risks. If not addressed, they will hinder the achievement of some critical governance, risk management...

AUD0625 Audit of Emergency Desert Locust Response Project in Yemen
07/2025

The audit identified 5 risks, of which four were rated as high and one as moderate. Although the project has been completed, the FAO Representation...

AUD0525 Audit of Second Line Monitoring of Country Office Operations
07/2025

The audit identified 5 high risks. FAO management has developed a suitable action plan to address the issues raised, and OIG will follow up on its timely...

Audit of Nepal
AUD0425 Audit of the FAO Representation in Nepal
06/2025

The audit identified 2 risks, which were both rated as moderate. If not addressed, they will hinder the achievement of some important governance, risk...

AUD0225 Audit of the FAO Representation of Afghanistan
02/2025

The audit identified 10 risks, of which 6 were rated as high and 4 as moderate. FAO Management has developed action plans to address the issues.