Under the Treasury Board Directive on Internal Audit, Transport Canada is required to publish information on the professionalism, performance and impact of our internal audit function. Here are the key ways in which we comply with standards.
Auditor training
Our internal auditors are trained to do their work effectively.
- 56% of staff have an internal audit or accounting designation (Certified Internal Auditor or Chartered Professional Accountant)
- 33% of staff are in the process of obtaining an internal audit or accounting designation
- 44% also hold other designations, including:
- Certified Government Auditing Professional (CGAP)
- Certified Information Systems Auditor (CISA)
- Certification in Risk Management Assurance (CRMA)
- Certified in Risk and Information Systems Control (CRISC)
- Certified in the Governance of Enterprise Information Technology (CGEIT)
- Certification in Control Self-Assessment (CCSA)
- Certification in Fraud Examination (CFE)
External quality assessment
In keeping with the Institute of Internal Auditors (IIA) Global Internal Audit Standards (formerly the International Standards for the Professional Practice of Internal Auditing) that an external quality assessment of the internal audit function be conducted at least once every five years, an external assessment was completed in 2021-2022. The assessment results indicated that Transport Canada’s Internal Audit function “generally conforms” with the Policy on Internal Audit and the related International Professional Practices Framework’s Code of Ethics and the Standards, the highest rating that can be obtained.
Quality Assurance and Improvement Program
Our audits conform to international standards for the profession.
Quality assurance reviews of our audits are done periodically. These reviews have never found instances of non-conformance with the IIA Standards.
The Departmental Audit Committee (DAC) was briefed at its June 18, 2025 meeting on the internal processes, tools and information considered necessary to evaluate internal audit conformance with the IIA Standards and on the results of our Quality Assurance and Improvement Program.
Risk-based audit plan and related information
Our internal audits are carried out according to a risk-based audit plan approved by the Deputy Minister.
The table below presents the status of internal audit engagements that were planned for 2024-2025, as well as engagements with outstanding management action plans (MAP). The table outlines the following:
- name of the audits
- status of the audits
- date the audit report was approved
- date the audit report was published
- original planned date for completion of all MAP items
- percentage of MAP items completed
| Title | Status of audit | Date report approved | Date report published | Original planned completion date of MAP | % of MAP completed |
|---|---|---|---|---|---|
| Review of the National Aircraft Certification Program | Published – MAP not fully implemented | November 26, 2021 | June 10, 2022 | December 2025 | 50% |
| Review of Transport Canada's Procurement Practices for Selected Vendors | Published – MAP fully implemented | February 20, 2024 | June 24, 2024 | March 2025 | 100% |
| Review of the National Enforcement Program | Approved – Not Published | June 18, 2025 | |||
| Review of Transport Canada’s Cybersecurity | Approved – Not Published | June 18, 2025 | |||
| Real-Time Assurance for the High-Speed Rail Initiative | Approved – Not Published | June 18, 2025 | |||
| Follow-up Audit of the Audit of TC-Owned and Staff-Operated Airports | Postponed | ||||
| Audit of Contracting and Procurement | Cancelled |
Note: In order to address emerging risks and departmental priorities, we may adjust the internal audits planned in the risk-based audit plan.
Average overall usefulness rating of areas audited
In 2024-2025, the average overall usefulness was rated as “Excellent” by senior management of areas audited, indicating that audit clients viewed the internal audit function’s assurance and advisory support as adding value to their decision-making processes.