External Support: Risk, Internal Control & Assurance Functions for DARA

The MoD Director Audit, Risk and Assurance had a requirement for external support in the following areas: 1. Internal Control and Assurance Frameworks: External support is required to develop control frameworks covering all functional areas (key areas were: finance, commercial, civilian and military personnel, logistics, acquisition, security and business resilience) and business units (Army, Navy, Air, JFC, DIO, HOCS and DE&S).

The development of control frameworks will include assessment of key risks, design of controls and assurance strategies for controls. It was envisaged that the external support provider will assess the control design effectiveness and based on their experience offer a view on best practice controls.

Assistance will include the implementation of the control frameworks in the organisation units and implementation of assurance strategies. 2. Enterprise Risk Management Framework: External support is required to implement a common risk framework throughout the organisation.

This requires working with senior management in the identification and assessment of risks and devising appropriate risk management strategies. Further, support is required to embed risk management in business operations and to improve the quality of risk information including the development of MoD wide risk landscape.

Assistance may also be sought in the selection and implementation of a risk software tool. 3. Fraud: External support is required in undertaking in fraud risk assessments, development of data and investigations.