Ignacio García Aguilar y Pedro Ruiz Pérez
6. M OTORES DE BÚSQUEDA
In May 2013 ASIO commenced a review of its Strategic Risk Management Framework. The purpose of the review was twofold:
to establish whether the framework still served ASIO’s requirements and to ensure ASIO was well placed to implement changes required by the Public Governance, Performance and Accountability Act 2013 (PGPA Act).
The review found that the framework ensured ASIO met the compliance requirements of risk management standard (AS/NZS ISO 31000:2009) but that it did not focus on treating risk as an opportunity. The review also identified changes required for ASIO to be suitably prepared for commencement of the PGPA Act. In response to the review, ASIO developed a new draft risk management policy. This draft policy was endorsed by ASIO’s Executive Board in December 2013 and has since been reviewed to ensure compliance with the PGPA Act. To support the new policy, ASIO has developed an overarching statement on its tolerance of risk, and it is developing risk threshold statements for each of its corporate committees. These statements will enable the committees to communicate to staff the risks ASIO is prepared to take to achieve its objectives. Such communication is aimed at assisting ASIO officers at all levels to assess the level of risk they are taking to achieve outcomes in their work. At the conclusion of the reporting period, ASIO’s risk management policy met the requirements of the PGPA Act. Work is ongoing to further build on progress made in ASIO’s approach to risk.
Corpor
ate mana
gement
66
ASIO Report to Parliament 2013–14
5
PublIC GOvERnAnCE, PERFORmAnCE AnD ACCOunTAbIlITy ACT
The Public Governance, Performanceand Accountability Act 2013 (the PGPA Act) establishes a principles-based financial management framework covering governance, accountability and performance. Regulatory details have been provided in rules made under the PGPA Act. The PGPA Act replaces the Financial Management and Accountability Act 1997 and the Commonwealth Authorities and Companies Act 1997. The substantive provisions of the PGPA Act came into effect on 1 July 2014, while some requirements will come into effect from 1 July 2015.
The PGPA Act imposes a number of duties both on ‘accountable authorities’, including the Director-General of Security, and on officials. ASIO has undertaken a range of activities to prepare for the commencement of the PGPA Act.
▶ The Executive Board and the Audit and Risk Committee (ARC) received briefings from the Department of Finance on the PGPA Act and its implications.
▶ ASIO reviewed the ARC’s charter and composition to ensure the committee fulfils the responsibilities set out in the PGPA Act.
▶ ASIO has updated its financial instructions and delegations to reflect the requirements of the PGPA Act.
▶ A principles-based Commonwealth Risk Management Policy has been developed by the Department of Finance to support the discharge of responsibilities under the PGPA Act. ASIO has refreshed its enterprise risk framework to comply with the PGPA requirements.
The PGPA Act brings together
responsibilities in relation to planning, measuring, assessing and reporting financial and non-financial performance. The Act establishes seven elements to provide a means for recording and reporting on performance; of these elements, six are new features. The PGPA rules on fraud establish minimum standards for managing the risk and incidents of fraud. They are consistent with the current Commonwealth Fraud Control Guidelines and ASIO already complies with them.
Further PGPA legislation—the Public Governance, Performance and Accountability Amendment Act 2014 and the Public Governance, Performance and Accountability (Consequential and Transitional Provisions) Act 2014—was enacted in 2014. See Part 4 for further information.
Corpor
ate mana
gement
ASIO Report to Parliament
2013–14
5
67
Outreach
ASIO is committed to engaging across the public, community, government and business sectors. Building effective relationships and meaningful dialogues is integral to ASIO’s work in maintaining the security of Australia, its people and its interests.
As Australia’s security intelligence organisation, ASIO may pique interest, curiosity and reserve. Through direct public contact, such as the Director-General of Security’s speeches at community events, ASIO seeks to dispel inaccuracies, foster a broad understanding of the Organisation and its challenges, and continue to build trust among the Australian community. The public can also contact ASIO directly,
through the ASIO public line (1800 020 648). Through a constant exchange of
information and ideas, ASIO builds indispensable relationships with agencies in both government and business. ASIO’s protective security program, targeted briefing days and unclassified reports on issues of national security are all elements in ASIO’s comprehensive program of outreach and engagement.
ASIO Partnership Forum
ASIO’s Partnership Forums involve participants from the national security community and broader government partners. The forums aim to develop the participants’ understanding of ASIO’s role, structure and capabilities in the context of the wider national security community, as well as to foster a common understanding of priorities and shared challenges.During the reporting period, ASIO held six Partnership Forums: three forums for senior officers and three for Senior Executive Service officers. These forums attracted attendance from 120 people across 42 state, territory and Commonwealth government agencies. Feedback from the forums was overwhelmingly positive, with attendees remarking on the high level of detail and contemporary nature of the information provided.