Fraud and Corruption Control Framework TRIM 13/384765 Page | 1 TRIM: 13/377618 Contents Director-General’s Foreword .......................................................................................................... 4 Introduction ......................................................................................................................................... 5 Purpose ............................................................................................................................. 5 Goals and Objectives ........................................................................................................ 5 Our Policy ............................................................................................................................................ 6 What is Fraud and Corruption? .......................................................................................... 6 Our Policy Statement ......................................................................................................... 7 Our Control Plan................................................................................................................................. 8 Ethical Leadership and Culture .......................................................................................... 9 Legislation and Governance ............................................................................................ 10 Legislation ...................................................................................................................................... 10 Governance Structures ................................................................................................................ 10 Roles and responsibilities ............................................................................................................ 11 Key Control Strategies ..................................................................................................... 12 Prevention Strategies ...................................................................................................... 13 Integrated Policy............................................................................................................................ 13 Code of Conduct ........................................................................................................................... 13 Staff Education and Awareness .................................................................................................. 13 Client and Community Awareness ............................................................................................. 14 Risk Assessment ........................................................................................................................... 14 Internal Controls ............................................................................................................................ 15 Detection Strategies ........................................................................................................ 16 Internal Reporting.......................................................................................................................... 16 Public Interest Disclosures .......................................................................................................... 16 Response Strategies ....................................................................................................... 17 Page | 2 TRIM: 13/377618 External Reporting ........................................................................................................................ 17 Investigations ................................................................................................................................. 18 Monitoring, review and continual improvement of the Fraud and Corruption Control Framework ......................................................................................................................................... 19 Appendices ........................................................................................................................................ 20 Appendix 1: Legislation and other Instruments - Fraud and Corruption Control .............. 20 Appendix 2: Fraud and Corruption Control Roles and Responsibilities ........................... 21 Appendix 3: Fraud and Corruption Control Risk Assessment Plan ................................. 24 Appendix 4: Definitions................................................................................................................ 25 Page | 3 TRIM: 13/377618 Director-General’s Foreword The Department of Education, Training and Employment (DETE) Fraud and Corruption Control Framework 2013-2016 sets out the standard of accountability and transparency expected of the department. The aim of this framework is to control opportunities for fraudulent and/or corrupt activities and promote the department’s zero tolerance to fraud and corruption. Thorough and effective fraud and corruption control requires commitment at all levels within the department. Effective governance arrangements, ethical leadership and, decision making, accountability and performance improvement underpin our fraud and corruption control methods. The ever changing environment in which the public sector operates increases the opportunity for fraudulent and corrupt activities. The growing convergence of the public and private sectors, and the increase in cooperative and or strategic partnerships, have emphasised the importance of accountability and sound governance structures, including in relation to fraud and corruption 1. As public sector employees, we have the responsibility to undertake our roles in a transparent and accountable way. All staff must use this framework to assist with the prevention, detection and ongoing responsiveness to fraud and corruption. This will ensure our stakeholders have ongoing confidence in the department’s commitment to deliver quality services to the community free from fraud and corruption. Dr Jim Watterston Director-General 1 Fraud Control in Australian Agencies – Best Practice Guide 2004 Page | 4 TRIM: 13/377618 Introduction Purpose As a government agency the community expects the department to ensure its workforce acts legally, ethically and at all times in the public interest. Risk of fraud and corruption is inherently linked to the department’s activities and can undermine the achievement of the department’s objectives, damage the credibility and public confidence in the department, affect employee morale and compromise the delivery of its services to students, parents/carers, industry and community. The Fraud and Corruption Control Framework 2013-2016 (FCC Framework) outlines the department’s policy and plan for controlling fraud and corruption risks. Implementation of the FCC Framework seeks to control the opportunities for fraud and corruption, whether committed by internal or external parties, to ensure the protection of public monies, property and information, the rights of organisations and individuals, and maintain the effectiveness of all departmental operations. It is an integral part of the department’s Enterprise Risk Management Framework and aims to drive business integrity through strong leadership, sound corporate governance, accountability, internal control and transparency. This proactive approach enables the department to manage fraud and corruption risk at an acceptable level in an environment that is becoming increasingly complex. All employees, contractors and third party providers need to be aware of and committed to their shared responsibilities to foster, develop and maintain a highly ethical organisational culture. Goals and Objectives The FCC Framework specifically aims to clearly articulate through the: policy: - definition of the term “fraud and corruption” - the department’s commitment and attitude towards fraud and corruption - the department’s approach to controlling fraud and corruption control plan: - how the fraud control structure is embedded within the department’s organisational structure - the roles and responsibilities for fraud and corruption control - strategies to prevent, detect and respond to fraud and corruption - a summary of the fraud risks (internal and external) associated with the department’s functions, the controls in place to minimise the opportunity for fraud and corruption and their implementation details - protocols on how employees, contractors, third parties or members of the public can report suspected fraud Page | 5 TRIM: 13/377618 Our Policy What is Fraud and Corruption? Fraud and corruption against the department is defined as: Fraud: - any deliberate deceitful conduct or omission designed to gain an advantage to which a person or entity is not entitled - the intentional use of false representations or deception to avoid an obligation, gain unjust advantage or in the context of public administration, commonly known as ‘rorting the system’. Corruption: - dishonest behaviour that may involve the misuse of position or authority, or other acts for personal gain or advantage, or for another person or entity, which may cause loss to the department, its clients or the general community - may also include other elements such as breaches of trust and confidentiality. Fraudulent and corrupt conduct by public officials may fall within the category of ‘official misconduct’ under Queensland’s Crime and Misconduct Act 2001 and may also be considered a criminal offence under the Criminal Code Act 1899. Some examples of common activities of fraud and corruption in the public sector include: Internal External Collusion corporate card misuse, such as payment for personal expenses fictitious people on the payroll system or delayed terminations abuse of position and power, including accepting or offering bribes or gifts, nepotism in staff appointments submitting false travel claims consistently recording incorrect hours of work on timesheet unauthorised use of government vehicles theft or unauthorised use of public funds or physical resources, such as office supplies, stationery customer deliberately claiming benefit they are not eligible for external providers making claims for services that were not provided individuals/businesses providing false or misleading information or failing to provide it when obliged to do so inappropriate influence over grants and subsidies applications manipulation of a procurement process • inappropriate involvement with suppliers, including ‘kickbacks’ such as entertainment and hospitality unlawful or unauthorised release of information knowingly making or using forged or falsified documentation conflicts of interest Page | 6 TRIM: 13/377618 Our Policy Statement The department is committed to excellence in fulfilling public expectations of high standard of service performance and in meeting its statutory obligations. This includes the establishment of a fraud and corruption prevention culture to enhance the department’s integrity and performance, and strengthen public confidence. The department takes a zero tolerance approach towards any fraudulent or corrupt actions by departmental staff, contractors, suppliers, third party service providers, funding recipients and clients. Instances of official misconduct are referred to the Crime and Misconduct Commission (CMC) and in some instances to the Queensland Police Service for investigation and possible prosecution. The department is committed to recovering losses incurred from fraud and corruption activities, after considering all relevant issues. The department applies a risk management approach, supported by organisational values and culture, a hierarchy of governance and suite of effective controls to prevent, detect and respond to potential fraudulent or corrupt conduct. The department will appropriately deal with all reported allegations of fraud and corruption or refer the matter to an applicable external agency. There is an obligation placed on all staff to report suspected fraudulent and/or corrupt activities to their supervisor or manager, Internal Audit Branch (IAB) or the Ethical Standards Unit (ESU) where the allegations will be assessed and suitably dealt with. The department is committed to providing all staff and relevant stakeholder’s with appropriate education and training in public sector ethics and fraud awareness to ensure understanding of their respective responsibilities and obligations. The department’s policy has been developed in accordance with the CMCs Fraud and Corruption Control – Guidelines for Best Practice 2005 and the Australian Standard AS8001-2008 Fraud and Corruption Control. Page | 7 TRIM: 13/377618 Our Control Plan The department’s plan to managing fraud and corruption control is based on a set of essential conditions2 to establish a sound fraud control environment (Figure 1). The essential conditions consist of an integrated response of: Ethical leadership and culture – to develop and maintain strong ethical values and high standards of ethical behaviour Legislation and governance – to ensure legislation and policies are operationalised in an accountable and transparent manner through robust governance structures Key control strategies – set of interrelated actions to effectively prevent, detect and respond to fraud and corruption, which are subject to a cyclical process of review and improvement. Figure 1: Fraud and Corruption Control Framework 2 ANAO Fraud Control in Australian Government Entities – Better Practice Guide March 2011 Page | 8 TRIM: 13/377618 Ethical Leadership and Culture Ethical leadership and the implementation and ongoing maintenance of a sound ethical culture are critical to underpinning fraud and corruption control within the department. Senior management must lead by example and behave in a manner consistent with the Code of Conduct for the Queensland Public Service and the department’s Standard of Practice. Specific lines of accountability, roles and responsibilities for senior management are further outlined in the Legislation and Governance section. The Code of Conduct for the Queensland Public Service and the department’s Standard of Practice provide a set of ethics principles, values and standards of conduct for all employees. This ethical framework guides behaviour in the workplace and is an important corruption resistance tool to promote ethical behaviour. They work in tandem with the best practice principles outlined in the department’s Enterprise Risk Management Framework to guide how we effectively and efficiently manage fraud and corruption risks at all levels. Implementation of the Code of Conduct is outlined in the Application of Key Control Strategies section. Figure 2: Principles that underpin the Fraud and Corruption Control Framework Enterprise Risk Management • Creating & protecting value • Integral part of all organisational processes Public Sector Ethics • Integrity and impartiality • Promoting the public good • Commitment to the system of government • Accountability and transparency Fraud & Corruption Control • Part of decision-making • Explicitly addressing uncertainty • Systematic, structured and timely • Based on the best available information • Tailored • Human and cultural factors • Transparent inclusive • Dynamic, iterative and responsive to change • Continual improvement Page | 9 TRIM: 13/377618 Legislation and Governance Legislation The department’s framework is underpinned by legislation, Australian standards and best practice guidelines. In particular: Financial Accountability Act 2009 - commits the department to protecting its revenue, expenditure and property from fraudulent activity Public Sector Ethics Act 1994 – sets out the ethics principles and values for public service agencies and public officials, and provides standards of conduct consistent with the ethics principles and values Crime and Misconduct Commission Fraud and Corruption Control – Guidelines for Best Practice 2005 – provide the model for development and implementation of the fraud and corruption control policy and plan. A full list of the applicable legislation and other instruments is outlined in Appendix 1. Governance Structures A rigorous governance structure within the department ensures legislative requirements are effected in an accountable, effective and transparent way. As illustrated in figure 3, consistent with the Enterprise Risk Management Framework, the department’s governance structures support fraud and corruption control at the strategic, corporate and operational level. Figure 3: Governance Structures Page | 10 TRIM: 13/377618 Roles and responsibilities The table below provides a summary of the roles and responsibilities for fraud and corruption control. A more comprehensive list of responsibilities is outlined in Appendix 2. Role Responsibility Director-General Deputy DirectorGeneral, Corporate Services Deputy DirectorsGeneral, Assistant Directors-General, Regional Directors, Executive Directors, Directors and Managers Director, Ethical Standards Unit All employees Fraud and Corruption Control Committee Audit and Risk Management Committee Internal Audit Branch overall accountability for the prevention and detection of fraud and corruption within the department and has a legislated responsibility to exercise authority on behalf of the department through the Executive Management Group (EMG) to the senior leadership team has delegated authority as the Fraud and Corruption Control Coordinator and acts as ‘champion’ to drive the fraud and corruption control regime within the department is the Chair to the Fraud and Corruption Control Committee be ethical leaders, promote and contribute to an accountable, transparent and ethical culture manage risks within their area of responsibility and contribute to improvement in control effectiveness ensure staff have a high level of fraud and corruption awareness and know how to report suspected fraudulent or corrupt behaviour reports suspected official misconduct, criminal and other matters as appropriate to the relevant authorities develop and implement the fraud and corruption control framework manage investigations into allegations of suspected official misconduct takes a proactive approach to public sector ethics by promoting an ethical culture, practice and decision making throughout the department understand their role in contributing to fraud and corruption prevention and the actions to be taken to prevent, detect and report any such activity must attend education, training and awareness programs on a regular basis during their employment to assist them in performing their role within the department report alleged wrongdoing in accordance with the s.1.1(d) of the Code of Conduct for the Queensland Public Service and s.4.1 of the department’s Standard of Practice advises the Audit and Risk Management Committee outlining certain risks to the department in relation to fraud and corruption matters and puts forward pertinent recommendations/actions regarding these undertakes review and evaluation on the effectiveness of how the department monitors compliance with relevant legislation and best practice requirements for fraud and corruption control accountable for the implementation and ongoing monitoring of the fraud and corruption program advises the Director-General outlining audit matters and certain risks to the department, including potential fraud and corruption matters and puts forward pertinent recommendations regarding these undertakes independent and objective audit activities that adds value to and improves operational capability and compliance within the department Page | 11 TRIM: 13/377618 Key Control Strategies The department’s 10 key control strategies3 can be grouped into three key categories: Prevent - as the first line of defence, to reduce the risk of fraud and corruption occurring Detect - discover and investigate fraud and corruption when it occurs Respond - take corrective action and remedy the harm caused by fraudulent and corrupt behaviour. Key Control Strategy Categories Prevent Detect Purpose Respond Integrated agency policy demonstrate the department’s resolve to combat fraud and corruption Code of Conduct sets out expectations and standards of ethical behaviour within the department Staff education and awareness Client and community awareness Risk assessment ensure a well-informed workforce with a greater capacity to recognise and respond to the risks of fraud and corruption provide a comprehensive understanding of the department’s internal and external vulnerabilities mechanisms to eliminate or minimise risks Internal reporting mechanism for employees to report potential fraudulent or corrupt activities and other alleged wrongdoing Public interest disclosures Investigations External reporting Communicate Intent maintain public trust and forestall potentially unacceptable practices from external parties Internal controls responsibility for receiving and managing all allegations of wrongdoing received under Public Interest Disclosure Act 2010 process to ensure allegations of fraud and corruption are actioned appropriately and investigated competently mechanism for the DirectorGeneral to report any suspected fraudulent or corrupt activity to the appropriate external agency Limit Opportunities Reinforce Zero Tolerance The 10 elements are outlined in the Crime and Misconduct Commission’s Fraud and Corruption Control Guidelines for best practice 2005 3 Page | 12 TRIM: 13/377618 Application of the Key Control Strategies Prevention Strategies Integrated Policy The department is committed to improving governance arrangements through strong leadership, responsible and ethical decision making, transparency and accountability, and performance improvements. The framework should be read in conjunction with: Legislative Framework Corporate Governance Framework Enterprise Risk Management Framework Developing Performance Framework Code of Conduct There is an expectation of all departmental employees to make decisions ethically and with integrity. The Code of Conduct for the Queensland Public Service provides a clear set of ethics principles, values and standards of conduct for all employees that supports and guides ethical behaviour when delivering government services to the people of Queensland. The department has developed an agency specific Standard of Practice, supplementary to the Code of Conduct, which provides a clear statement of what is expected of all staff in supporting ethical standards of conduct. The Standards of Practice also provides advice and guidance for employees in making ethical decisions, especially in circumstances where the ‘correct’ or ‘best’ course of action may not be clear. To assist in the resolution of alleged inappropriate workplace behaviour, employees should seek advice from their supervisor or manager when appropriate, or contact the ESU. Staff Education and Awareness A well informed workforce will increase the department’s capacity to detect, prevent, and respond to the risks of fraud and corruption. It is the responsibility of all managers to support the implementation of the plan and the responsibility of all staff to ensure they have fulfilled the necessary training requirements under the plan. Mandatory public sector ethics education and training is required to be completed by all new employees through the DETE induction program. Ongoing ethics related education and training is required by all employees at regular intervals during their employment with the department. The public sector ethics education and training module includes: ethical decision making training and awareness, including Code of Conduct internal controls training fraud and corruption (public interest disclosure) training and awareness. The public sector ethics education and training is available to employees through a variety of delivery modes: face-to-face training on-line ethical decision making training available on the Learning Place Page | 13 TRIM: 13/377618 train-the-trainer package TAFE institutes, on-line, through the institutes learning management system (LMS) ethics related resources published on the intranet site, One Portal, developed by ESU and available to all employees DETE induction website (mandatory induction). Client and Community Awareness It is important the department sends a clear message about its policy for fraud and corruption control to the wider community and external providers, who have direct dealings with the department, such as contractors, suppliers, third party providers, funding recipients and its clients. The department emphasises its integrity and commitment to high standards of probity in all its dealings, including zero tolerance towards fraud and corruption by promoting this through: making the fraud and corruption control framework publically available on the DETE internet gaining P&C commitment and ensuring a documented process for reporting potential fraudulent and/or corrupt activities provisions incorporated into the department’s standard contract arrangements the provision of a fraud reporting hotline - 1800 727 031 publication of pertinent complaint data through the DETE Open Data Strategy. The FCC Framework and other relevant policies and procedures are published on the department’s internet site to enable all community members’ access. Risk Assessment Fraud and corruption risk assessment is an integral part of the department’s overall risk management framework and provides the department with an understanding of its fraud and corruption vulnerabilities and possible strategies to eliminate or minimise those risks. Fraud and corruption risk assessments are carried out in accordance with the department’s Enterprise Risk Management Framework. The department’s enterprise risk management procedure and process, risk assessment criteria, facts sheets and tools to support the completion of fraud and corruption risk assessments are located in the department’s Policy and Procedure Register. Fraud and corruption risk assessments are to be conducted by each division on their specific functions/processes every two years. The department has identified a number of functions/processes considered to be high areas of vulnerability to fraudulent and corrupt activity. As a minimum, fraud and corruption risks are to be identified and assessed for the following areas: accounts receivable recruitment corporate card payroll purchasing timesheets asset management funds and grants management accounts payable information management procurement regulation contract management Potential fraud and corruption risks are identified as risks to the department’s functions/processes and as such are classified under the Enterprise Risk Management Framework as operational risks. To Page | 14 TRIM: 13/377618 ensure visibility of the fraud and corruption risks across the department, they are to be recorded as operational risks in the Enterprise Risk Assessor (ERA), the department’s online risk register. As required under the enterprise risk management procedure: risks are required to be assessed at the inherent (risks level without controls), controlled (level of risk with controls in place) and if required treated level (level of risks with controls and treatments in place) unacceptable controlled risks (i.e. high or extreme) are required to be treated unacceptable treated risks (i.e. high or extreme) must be escalated to a senior level of management for oversight review of the risks is to be commensurate with the level of risk exposure or when there is significant change to operations, but at least biannually as part of the department’s structured operational planning and review process. Judgement on the effectiveness of the controls is critical to assessing the controlled level of risk. Key risks and control activities identified through the fraud and corruption risk assessment are listed in Appendix 3: Fraud and Corruption Control Risk Assessment Plan. Internal Controls An internal control system consists of structure, policies, procedures, processes, tasks, information systems and other tangible and intangible activities that combine to record and manage the risks of the department. The department’s internal control framework places a strong emphasis on accountability, integrity, best practice management of resources, operational performance, compliance and ‘corporate health’. Some of the key controls the department has in place to meet the requirements of the Financial and Performance Management Standard 2009 includes: Role Internal Control Examples Lines of accountability Governance committees, organisational structure, delegations of authority, Strategic Plan and annual operational plans, Annual Report, Service Delivery Statement Resource management Budget management, Establishment Management Framework Suitably qualified staff Position descriptions, merit based recruitment and selection processes, pre-employment screening, training, Developing Performance Framework Information, communication and technology systems SAP, One School (transactions, records, operating programs and systems producing ICT information), TRIM (Data collection and exchange), OnePortal intranet and DETE internet (internal and external communications), MyHR (human resources recording and reporting), information systems standards, assets registers (physical resources) and reporting mechanisms, including adequate audit trails Policy and procedures Financial Management Practice Manual, School Accounting Manual and other procedures published in the department’s Policy and Procedure Register Investigations into cases of fraud and corruption show strong links between the incidence of fraud and corruption and poor internal control systems. As a result the assessment of internal control effectiveness is a crucial step in the fraud and corruption risk assessment process. Page | 15 TRIM: 13/377618 The Internal Audit Branch supports the department’s efforts to establish and maintain systems integrity through an established audit program. The audit program includes periodic risk based assessments of the department’s business units using best practice methodologies to assess levels of compliance with existing internal controls. Detection Strategies Internal Reporting Reporting suspected wrongdoing is vital to the integrity of the department and the Queensland public sector. Research studies and surveys consistently show that staff members form the single most compelling source in detecting fraud and corruption 4. All departmental staff have an obligation to report suspicious actions or potential wrongdoing in accordance with the Code of Conduct. Students, clients, parents, caregivers, concerned members of the public or anonymous persons who do not wish to be identified can also make a complaint about fraud and corruption. The department’s complaint management system includes policies and procedures and an information system to capture all stages of reported complaints from initial receipt, assessment, through to investigation, follow up and resolution, and notification of the outcome to the discloser. Data can be further used to provide the department with information for other reporting purposes, and facilitate continuous improvement to its fraud and corruption resistance through analysis of trends, areas of risk and control weakness. Avenues to report suspected wrongdoing, including fraud and corruption are outlined in the following departmental procedures, located in the department’s Policy and Procedure Register: Managing Employee Complaints Complaints Management – state schools Information privacy complaints Making and Managing a Public Interest Disclosures under the Public Interest Disclosure Act 2010 Employees should report suspected wrongdoing to their immediate supervisor or manager, in the first instance. Should staff be reluctant to report any concerns immediately or feel appropriate action has not been taken by the supervisor or manager who received the complaint, alternative reporting options include: a more senior manager Director, Ethical Standards Unit Executive Director, Internal Audit Branch Fraud and Corruption Hotline 1800 727 031 directly to the CMC Public Interest Disclosures A public interest disclosure (PID), in general terms, is a disclosure of information of public interest, involving wrongdoing within the public sector, made to a proper authority. Under the Public Interest Disclosure Act 2010, a proper authority is defined as a public sector entity or a member of the Legislative Assembly. A PID can be made by any person whether a public officer (employee) or a member of the public. The department is dedicated to promoting the public interest by facilitating 4 CMC Fraud and Corruption Control Guidelines for Best Practice, 2005 Page | 16 TRIM: 13/377618 disclosures of wrongdoing and ensuring PIDs are correctly assessed and when appropriate, thoroughly investigated and dealt with in accordance with Public Interest Disclosure Act 2010. The department’s procedure Making and Managing a Public Interest Disclosure under the Public Interest Disclosure Act 2010 describes: the types of information that establishes a PID; the roles and responsibilities for making and managing a PID; process guidelines to assist a person wanting to make a PID; and how a PID is managed once reported. As with all internal reporting of suspected wrongdoing, the department: exercises due process and natural justice in its management of PID’s; makes all attempts to preserve confidentiality; provides appropriate protection to the person who made the PID; maintains all necessary records securely; and reports in an appropriate manner. Response Strategies External Reporting The Queensland government’s public sector integrity framework includes three independent statutory bodies for integrity building, the Crime and Misconduct Commission, the Queensland Ombudsman’s Office, and the Queensland Audit Office, supplemented by the law enforcement role of the Queensland Police Service. These government bodies provide a range of external channels to report suspected wrongdoing, including fraud and corruption. In some instances external reporting is a legislative obligation placed on government agencies. The role of each of the four government bodies and the department’s legislative reporting obligations to them is as follows: Government Body / Role Departmental Reporting Obligations Crime and Misconduct Commission (CMC) Director-General, or delegate notifies the CMC if the department suspects a report of wrongdoing involves official misconduct under the Crime and Misconduct Act 2001 receives complaints about possible misconduct and determines the most appropriate action to deal with them Queensland Audit Office (QAO) provides independent audit services to the Queensland Parliament and all state public sector entities and local governments Director-General, or delegate reports any suspected material loss (money lost >$500; and property valued >$5000) which may have occurred as a result of official misconduct or the commission of a criminal offence in accordance with the Criminal Code Act 1899, Crime and Misconduct Act 2001, Financial and Performance Management Standard 2009, or other Act Queensland Police Service (QPS) Director-General, or delegate reports: suspected fraud and or corruption arising out of criminal conduct under the Criminal Code Act 1899, or other Act uphold and enforce the law in Queensland Page | 17 TRIM: 13/377618 Queensland Ombudsman oversight agency for all public interest disclosures made to the Queensland government any suspected material loss (money lost >$500, or property valued >$5000) which may have occurred as a result of official misconduct or the commission of a criminal offence in accordance with the Criminal Code Act 1899, Crime and Misconduct Act 2001, Financial and Performance Management Standard 2009, or other Act Director-General is to: report on all PIDs made to the department ensure organisational commitment in managing PID’s develop, implement and maintain a management program under the Public Interest Disclosure Act 2010 and Public Interest Disclosure Standard No.1 The department also maintains reporting protocols with the Public Service Commission through the Director, ESU in relation to the integrity and accountability of the department. Investigations Investigations undertaken within the department may involve matters of suspected fraud, corruption, misappropriation, maladministration, theft and other matters where the conduct of an employee, if substantiated, could amount to official misconduct and may result in the initiation of disciplinary action, including dismissal. The department has an obligation to facilitate effective and efficient initial assessment and referral of all reports of alleged wrongdoing, which could amount to official misconduct to the CMC. After the CMC’s initial assessment, they may choose to investigate, or refer the matter back to the department for investigation. Investigations into allegations of official misconduct, including fraud and corruption, are conducted in accordance with the CMC’s Facing the Facts – A CMC guide for dealing with suspected official misconduct in Queensland public sector agencies. The adoption and application of this guide ensures processes are carried out in accordance with the CMC’s requirement for conducting administrative investigations objectively, thoroughly and without prejudice. When an investigation into alleged official misconduct, including fraud or corruption, is deemed necessary: all employees are obliged to respect the rights of all involved and maintain confidentiality pending a full investigation into an alleged wrongdoing managers and supervisors must ensure due process and encourage confidentiality any person disclosing alleged wrongdoing shall be advised of the outcome of investigation as soon as practicable the outcome of departmental investigations may be subject of review by the CMC. To strengthen prevention and awareness measures, designed to reduce or eliminate fraudulent and corrupt behaviour throughout the department, outcomes of investigations where complaints of alleged fraud and/ or corruption have been substantiated may be published, when appropriate to do so and when confidential records can be maintained. Page | 18 TRIM: 13/377618 Monitoring, review and continual improvement of the Fraud and Corruption Control Framework Effective monitoring and reviewing of the FCC Framework is an important part of the department’s accountability to its stakeholders and provides a mechanism for ongoing building of the department’s resilience to fraud and corruption. Some of the processes that support the review and continuous improvement of the FCC Framework include: review of the FCC Framework every two years (or in the event of a significant change occurring within the department) including: - control strategies, to ensure appropriate balance between prevention and detection strategies - control appropriateness and effectiveness of design and operation - update of the fraud and corruption risk assessment to ensure significant existing and emerging fraud and corruption risks are captured and managed review of individual fraud and corruption cases to identify cause, areas of control weakness, where possible measure the loss/cost of fraud and identify lessons learned. Page | 19 TRIM: 13/377618 Appendices Appendix 1: Legislation and other Instruments - Fraud and Corruption Control Instrument Type Legislation and other instruments Primary Legislation Criminal Code Act 1899 Crime and Misconduct Act 2001 Financial Accountability Act 2009 Information Privacy Act 2009 Integrity Act 2009 Public Interest Disclosure Act 2010 Public Sector Ethics Act 1994 Public Service Act 2008 Right to Information Act 2009 Whole of Government Policy Queensland Treasury Financial Accountability Handbook 2012 Standards, guidance and better practice Australian National Audit Office Fraud Control in Australian Government Entities – Better Practice Guide 2011 Australian Standard 8001-2008 Fraud and Corruption Control Code of Conduct for the Queensland Public Service 2011 Crime and Misconduct Commission Facing the Facts 2007 Crime and Misconduct Commission Fraud and Corruption control: guidelines for best practice 2005 Department’s Standard of Practice Independent Commission Against Corruption Fighting Fraud: Guidelines for state and local government – Booklet 2002 Queensland Treasury a guide to Risk Management 2011 Queensland Treasury Financial Management Tool 2012 Queensland Treasury Financial and Performance Management Standard 2009 Page | 20 TRIM: 13/377618 Appendix 2: Fraud and Corruption Control Roles and Responsibilities Role Director-General Responsibility overall accountability for prevention and detection of fraud and corruption within DETE legislated responsibility to exercise authority, on behalf of the department manage the department’s operations ensuring service delivery is effective and economical, and in the process avoids waste and extravagance manage public resources of the department efficiently, responsibly and in a fully accountable manner define goals and objectives in accordance with its mandate and governance framework implement policies and priorities responsibly ensure impartiality and integrity in the performance of the department’s functions ensure accountability and transparency in the department’s operational performance maintain accurate records and accounts, and report on these as required promote continual evaluation and improvement of department’s management practices Deputy Director- General, Corporate Services Deputy DirectorsGeneral, Assistant DirectorsGeneral, Regional Directors, Executive Directors, Directors and Managers delegated authority as the Fraud and Corruption Control Coordinator and acts as ‘champion’ to drive the fraud and corruption control regime Chair of the Fraud and Corruption Control Committee oversee the implementation and management of the fraud and corruption control framework take steps to ensure that all areas assume appropriate responsibility for fraud and corruption control and perform their functions according to the framework and relevant legislation ensure all areas of operation take the appropriate steps to implement effective risk management practices, including risk assessment of fraud and corruption in accordance with the enterprise risk management framework ensure the scope and nature of the education, training and awareness programs are comprehensive and designed to assist employees, contractors and clients to recognise, detect and prevent fraud and corruption provide advice to the Director-General and the EMG as necessary on fraud and corruption matters provide accurate and timely advice to the Audit and Risk Management Committee through the Internal Audit Branch on any fraud and corruption matters be ethical leaders and display high personal standards of behaviour consistent with the Code of Conduct for the Queensland Public Service and the department’s Standard of Practice have a visible adherence to the department’s ethical framework and promote adherence by all employees contribute to effective risk management strategies in accordance with the department’s enterprise risk management framework and ensure risk management practices are adhered to throughout their area of control develop strong internal controls to assist with fraud and corruption prevention in their area of responsibility ensure all employees are made aware of and attend appropriate education, training and awareness sessions to allow for a skilled and knowledgeable workforce, including public sector ethics education, training and awareness, Page | 21 TRIM: 13/377618 Role Responsibility internal controls and financial or procurement training ensure effective employee communication on the process for identifying and reporting on potential fraudulent and corrupt activities ensure where a public interest disclosure is made, the procedure for making and managing a public interest disclosure is adhered to follow the mandatory internal or external reporting requirements for reporting suspected official misconduct, including fraud or corruption All employees contribute to the development of improved systems, policies and procedures to enhance the department’s resistance to fraud and corruption including: safeguarding assets and other resources under their control having a clear understanding of their obligations regarding any losses, deficiencies and shortages that may be identified while at work ensuring all personal claims are accurate with no deliberate omissions (recording accurate hours of work on timesheets) fulfil their obligation to report wrongdoing in accordance with section 1.1 (d) of the Code of Conduct for the Queensland Public Service and section 4.1 of the department’s Standard of Practice actively seek education and training to learn and maintain knowledge and skills required to undertake their duties gain an understanding of the policies, procedures and guidelines that pertain to their role and work within the requirements of these follow the requirements for internal reporting of suspected fraud and corruption There is an obligation placed on all employees, contractors and anyone associated with the department to understand that managing fraud and corruption is as much a part of their responsibility as it is of the managers and senior leaders of the department. Audit and Risk Management Committee advises the Director-General outlining audit matters and certain risks to the department, including potential fraud and corruption matters and puts forward pertinent recommendations regarding these and reviews: governance processes to ensure all matters relating to alleged fraud and corruption or unethical conduct are dealt with appropriately currency, comprehensiveness and relevance of the enterprise risk management framework, policy and procedure for identifying, monitoring and managing significant business risks, including the identification and management of risks related to fraud submit recommendations to the Director-General to approve the internal audit plan, reviewing its scope and progress and any significant changes to it, including any potential difficulties or restrictions on the scope of activities review the internal audit plan annually to ensure it covers key fraud and corruption risks and that there is appropriate coordination with the external auditor, Queensland Audit Office Page | 22 TRIM: 13/377618 Role Responsibility Director, Ethical ensure the ESU fulfils the legislative function on behalf of the DirectorStandards Unit General to investigate all allegations of suspected official misconduct ensure a proactive approach to public sector ethics by promoting an ethical culture, practice and decision making through education and training programs implement, maintain and review the fraud and corruption control framework ensure the fraud and corruption control framework undergoes a biennial review or more frequently as required develop strategies in consultation with other key areas to achieve an effective fraud and corruption regime Ethical Standards Unit as CMC liaison officer report suspected official misconduct, criminal and other matters to the appropriate external agency: Crime and Misconduct Commission Queensland Police Service Queensland Ombudsman Queensland Audit Office conduct investigations into reports of suspected official misconduct, including fraudulent or corrupt practices manage and coordinate all public interest disclosures made to the department and ensure adequate support and certain protections are afforded the discloser in accordance with Public Interest Disclosure Act 2010 develop and maintain ethics related policies and procedures for building and sustaining integrity and accountability; for example, Standard of Practice, public interest disclosure procedure and guidelines, conflicts of interest, notification of other employment, bullying, lobbying and the fraud and corruption framework develop public sector ethics related education and training material to promote an ethical culture and performance; such as the ethical decision making awareness, internal controls and fraud awareness provide advice and direction to employees on the correct protocol for reporting matters to external agencies Internal Audit Branch provide independent appraisals, examination and evaluation of the department’s activities and assist management with the detection of suspected fraud and corrupt activities manage the department’s ‘fraud and corruption hotline – 1800 727 031’ undertake scheduled audits, which include examining established controls to determine if these are robust enough to reduce the risks of fraud and corruption, including the identification of work practices that may lead to fraudulent and corrupt activities undertake targeted audit activities to specifically identify any indication that fraud may have occurred, be alert to opportunities that could allow fraudulent activities report in writing any suspected activities of fraudulent or corrupt practices identified during an internal audit function to the Director, ESU for assessment and possible investigation or referral to the appropriate external agency Page | 23 TRIM: 13/377618 Appendix 3: Fraud and Corruption Control Risk Assessment Plan The fraud and corruption control risk assessment plan is being developed in consultation with key stakeholders and will be inserted upon completion. Page | 24 TRIM: 13/377618 Appendix 4: Definitions Term, abbreviations and acronyms Code of Conduct Definition The Code of Conduct for the Queensland Public Service outlines a set of ethics principles, values and standards of conduct all public service employees are expected to work within and how they should conduct their relationships with others The Code applies at all time when employees are performing their official duties including when they are representing the Queensland government at conferences, training events, on business trips and attending work related social events Corruption Dishonest behaviour that may involve the misuse of position or authority or other acts for personal gain or advantage, or for another person or entity, which may cause loss to the department, its clients or the general community It may also include other elements such as breaches of trust and confidentiality Employee Fraud For the purposes of this framework and in accordance with the Code of Conduct for the Queensland Public Service an employee is defined as: any Queensland public service agency employee whether permanent, temporary, full-time, part-time or casual; any volunteer, student, contractor, consultant or anyone who works in any other capacity for a Queensland public service agency Any deliberate deceitful conduct or omission designed to gain an advantage to which a person or entity is not entitled The intentional use of false representations or deception to avoid an obligation, gain unjust advantage or in the context of public administration, commonly known ‘rorting the system’ Fraudulent conduct by departmental employees may fall within the category of official misconduct under the Crime and Misconduct Act 2001 The offence of fraud is set out in section 408C of the Criminal Code Act 1899 Fraud and Corruption Risk Assessment The application of risk management principles and techniques in the assessment of the risk of fraud and corruption A fraud and corruption control risk management assessment guide has been developed to assist all managers to undertake an assessment of the work environment to ensure appropriate and effective identification, analysis, reporting, managing and treating of all potential acts of fraud and/or corruption Misconduct The Public Service Act 2008, section 187 (4) defines misconduct to mean inappropriate or improper conduct in an official capacity or inappropriate or improper conduct in a private capacity that reflects seriously and adversely on the public service Page | 25 TRIM: 13/377618 Term, abbreviations and acronyms Official misconduct Definition Official misconduct is defined in section 15 of the Crime and Misconduct Act 2001 as conduct that could, if proved, be: a criminal offence; or a disciplinary breach providing reasonable grounds for terminating the person’s servicers, if the person is or was the holder of an appointment Official misconduct is summarised as any serious misconduct relating to the performance of an employee’s duties that is dishonest or lacks impartiality, or involves a breach of trust, or misuse of officially obtained information The conduct must be a criminal offence or a breach of discipline serious enough to warrant dismissal Standard of Practice The Standard of Practice is an agency-specific, supplementary document to be used in conjunction with the Code of Conduct for the Queensland Public Service and outlines standards of conduct that relate specifically to the department’s employees in the same way as the Code Page | 26 TRIM: 13/377618
© Copyright 2026 Paperzz