Invitation to tender for internal audit on business continuity and disaster recovery
As the trusted coordinator of the Australian plant biosecurity system, Plant Health Australia (PHA) brings expertise, knowledge and stakeholders together to generate solutions that improve biosecurity outcomes to ensure that the system is future-oriented and solutions-focused.
We invite tenders for the provision of internal audit services during the first quarter of 2023 to review the adequacy of business continuity and disaster recovery plans and associated arrangements to ensure these can be successfully and effectively deployed in the event of a business continuity event or disaster.
The audit services will include, but will not be limited to:
- provide opinions on whether PHA has implemented disaster recovery plans and detailed recovery procedures for all key business systems, including documented roles and responsibilities and clear communication plans
- assess the adequacy and effectiveness of existing plans to support the prompt recovery of crucial enterprise functions and Information Technology (IT) facilities in the event of major failure or disaster
- determine whether current systems work economically and efficiently
- evaluate the performance of PHA’s business continuity plans during the COVID-19 pandemic as a recent test of our plans
- evaluate whether PHA has assessed their IT skillsets to effectively conduct disaster recovery activities
- evaluate the effectiveness and efficiency of internal controls currently in place and identify opportunities to enhance systems and processes
- fully describe any weakness or deficiencies, including possible reasons and frequency of occurrence and potential consequences or ramifications
- provide recommendations and suggestions to assist management improve systems as efficiently as possible whilst retaining an adequate control environment
- provide opinions on whether PHA has identified, assessed and considered all disaster recovery and business continuity related risks
- report on best practices in comparison with our current business continuity and disaster recovery plans
- report on compliance with all legal obligations
- provide recommendations and suggestions to assist management to improve systems and controls as efficiently as possible.
Closing date: 25 January 2023.