Executive Summary

Audit Title: INFORMATION TECHNOLOGY Department Inspection Report

Cut-off Date: 2025-06-02

Period Covered: 2025-06-23 – 2025-06-02

Overall Rating: High

Overall Risk Impact: Unsatisfactory

Responsible Officer: Florence

The audit conducted for the Information Technology unit of the Department for the period of June 2025 has been assessed with a current risk impact rating of Unsatisfactory. The compliance percentage stands at 8%, with a response rate of 12%. A total of twenty-five (25) exceptions were identified, of which two (2) have been resolved and three (3) remain outstanding. The risk counts include one (1) high risk, one (1) medium risk, and two (2) low risks. Notably, several findings indicate issues requiring attention, including a high-risk area related to backup failures, which necessitates the installation of new inverters with solar panels. Other findings reflect a mix of low and medium risks, with varying statuses on corrective actions. The overall assessment highlights significant areas for improvement within the unit's operations and compliance measures.

Overall Risk Assessment

High	Unsatisfactory: : Represents critical control weaknesses requiring prompt mitigation action. None or insignificant adequate compensating controls to mitigate risk exposure, given the impact of a risk, should it occur. Regulatory non-compliances involving penalties are also included in this category. Issues in this category have significant financial impact. Overall residual risk is High.
Medium	Room for Improvement: : Represents moderate control weaknesses requiring short – mid-term Management focus to strengthen existing controls. Some compensating controls are present, but additional controls are necessary to further mitigate risk exposure. Issues in this category has moderate financial impact. Overall residual risk is Medium.
Low	Satisfactory: Represents minor control weaknesses requiring management focus to enhance existing controls and the impact of risk is also minimal. Compensating controls might not be present to mitigate exposure but opportunities exist to enhance controls or improve operating efficiency. Issues in this category has insignificant financial impact. Overall residual risk is Low.

Key Audit Findings

#	Weakness	Root Cause	Agreed Corrective Action	Target Date	Risk Class
1	WIP	This is another issue	I am currently resolving it	Jun 2025	Medium
2		Light issue caused backup failure	Install new inverters with solar panels on the zinc roofing	Jul 2025	High
3		This is the root cause. It goes here	This is the corrective action, it goes here.	Jun 2025	Low

Compliance Certificate by Risk Category

#	Risk	Total Exceptions	Resolved	Outstanding
1	N/A	25	2	23

Audit Team & Review Details

Inspectors:

Moromoke Olaleye
mirabella edidjana

Review Dates: 2025-06-23 – 2025-06-02

Previous Inspectors: NIL

Previous Period: NIL

Signatories

Dayo Damilola Festus

TL, Internal Audit and Control

Oyebowale Nojeem Oladejo