Homerton university hospital NHS Foundation Trust INNOVATIVE | INSIGHTFUL | INTERNAL AUDIT Homerton university hospital NHS Foundation Trust Council of Governors 28 September 2017

RSM One of the largest providers of internal audit services to the UK public sector Over 15% of our business is in the not-for-profit sector - in excess of £45.0m Over 250 specialist internal audit staff Over 600 internal audit clients including 90 plus NHS Bodies & 28 FTs and wide range of corporate and financial Services experience Large Central London Office RSM is a leading provider of audit, tax and consulting services to middle market leaders, globally. We empower clients to move forward with confidence and realise their full potential. With around 3,500 partners and staff in the UK and access to more than 37,500 people in over 110 countries across the RSM network, we can meet our clients’ needs wherever in the world they operate. (On 26 October 2015, all RSM International member firms united under a single global brand. Our name changed from Baker Tilly to RSM and we have adopted a new logo and visual identity.)

What is Internal Audit? Definition: The role of internal audit is to provide independent assurance that an organisation's risk management, governance and internal control processes are operating effectively. Internal Audit Provide opinion on Trust’s systems for managing risk to the achievement of the Trust’s objectives Appointed by Management, overseen by Audit Committee Work across all areas of Trust’s operations Head of IA Opinion links to Annual Governance Statement External Audit Provide opinion on the Accounts Appointed by Council of Governors Primary focus on Financial Accounts and Quality Accounts Opinion on Accounts and Value for Money

OUTPUT OF INTERNAL AUDIT’S WORK PROVIDE AN OPINION ON THE SYSTEMS FOR RISK MANAGEMENT AND INTERNAL CONTROL Internal Audit Plan – discussed at Executive team and approved by the Audit Committee – linked to areas of risk – considers Regulatory requirements etc – broadly within 6 areas: Plan links to the Board Assurance Framework and provides assurance as to the reliance management can place on the controls in operation to mitigate its principal risks. Patient Safety / Quality Patient Experience Transformation Finance Workforce Risk and Governance

Planning the Audit (Cont.) HEAD OF INTERNAL AUDIT OPINION 2016/17 The Organisation has an adequate and effective framework for risk management, governance and internal control. However, our work has identified some weaknesses in the application of some internal controls. Management actions to address these weaknesses have been agreed with the Trust. Temporary Staffing Procurement Financial Planning & Budgetary Control Cyber Security Action plans in place and Audit Committee track the process to implement the actions agreed.

2017/18 INTERNAL AUDIT PROGRAMME Safeguarding Adults Ward Rounds Divisional Governance Mandatory Training Financial Accountability & Reporting Data Quality Cost Improvement Programme Accounts Receivables & Cash Management Payroll Lessons Learnt Soft Facilities – Contract Management Board Assurance & Risk Management Data Protection Information Governance Toolkit Audit Committee Chair to feed back on key issues in November.

Internal Audit ANY QUESTIONS?