Internal Audit Services (Apex Framework)

The Council is tendering for provision of an internal audit services (single supplier) framework for the London Borough of Croydon and for shared services work at other public sector organisations. Tender documents are available through the Council e-procurement portal at https://in-tendhost.co.uk/croydontenders/aspx/Home The internal audit service will be based on the Institute of Internal Auditor’s (IIA) Global Internal Audit Standards (GIAS) subject to the Application Note Global Internal Audit Standards in the UK Public Sector (Application Note) and the CIPFA Code of Practice for the Governance of Internal Audit in UK Local Government (Code of Practice).

The Service should use a risk-based approach to audit activity and hence Internal Audit will be involved in corporate governance and risk management. The scope of the service will comprise all activities necessary to ensure an independent appraisal of the affairs of Croydon Council.

The scope includes the whole system of internal controls, financial and otherwise as established by the Council. The contractor will be responsible for ensuring that Croydon Council meets all of the requirements as set out in the tender documents.

All areas of Croydon Council’s activities should be audited on a risk based approach and/or at frequencies set out by Croydon Council. The audit areas to be undertaken and included in the scope of the service are: • systems (including computer audit) and compliance audits; • probity audits; • contract and project management audits; • risk management and governance reviews, and • specialist and ad-hoc audits.