3.3 Assessment scope during fiscal year 2011-12

During fiscal year 2011-12, the CFIA has taken measures to assess its system of ICFR in the following areas:

Business Processes

• Revenue
• Pay
• Statutory Compensation Payments
• Financial Close and Reporting
• Operating and Maintenance Expenses

Entity Level Controls

• Governance
• Risk Management

General Computer Controls

• SAP / Enterprise
• Peoplesoft
• Electronic Invoicing
• CFIA IT Access Control and Change Management

4. Assessment results

The following summarizes key assessment results from the design and operating effectiveness testing completed by the CFIA during fiscal year 2011-12.

4.1 Design effectiveness of key controls

When assessing design effectiveness, the CFIA updated process documentation and validated key processes with stakeholders. Design effectiveness testing also validated the appropriate alignment of each key control with risks. During fiscal year 2011-12, the CFIA identified the following improvement opportunities in the design effectiveness of its controls:

Pay

• Strengthen the controls of pay transactions.

Revenue

• Enhance the information captured in Quality Management System for revenue monitoring purposes; and
• Improve the consistency of invoicing processes across the regional offices.